CVE-2026-101884

OpenClaw Windows Node before 2026.7.1 contains an incomplete environment-variable sanitizer in system.run that fails to block GITCONFIG, DOTNETSTARTUPHOOKS, and JAVATOOLOPTIONS variables. Attackers with gateway or agent access can supply these variables to allowlisted tools like git, dotnet, or...

CVE-2026-101883

OpenClaw Windows Node through 2026.9.4 contains a server-side request forgery vulnerability in the canvas.present capability that bypasses URL risk evaluation enforced by canvas.navigate. Attackers with gateway or agent access can issue canvas.present to make the node's WebView send requests to...

CVE-2026-101882

OpenClaw Windows Node before 2026.7.1 contains an incomplete validation vulnerability in system.execApprovals.set that accepts wildcard-executable rules and abusable system binaries like mshta, rundll32, and certutil. Remote callers can add broad allow rules to execute arbitrary commands on the...

CVE-2026-101881

OpenClaw Windows Node before 2026.7.1 contains an allocation of resources without limits vulnerability in the gateway WebSocket transport that allows connected gateways to exhaust node memory. Attackers can send an unending sequence of WebSocket continuation frames without EndOfMessage to cause...

CVE-2026-101879

OpenClaw Windows Node before 2026.7.1-3 contains a missing authorization vulnerability in NodeService capture handlers that allows connected gateways or agents to perform screen snapshots, camera snaps, and location captures without consent prompts. Attackers can invoke screen.snapshot,...

CVE-2026-101880

OpenClaw Windows Node before 2026.7.1 contains an incorrect authorization vulnerability in the system.run exec-approval policy where ExecShellWrapperParser fails to split commands on pipe operators or extract command substitutions. Connected gateways or agents can bypass approval rules by placing...

EUVD-2026-90257

OpenClaw Windows Node before 2026.7.1 contains an incomplete environment-variable sanitizer in system.run that fails to block GITCONFIG, DOTNETSTARTUPHOOKS, and JAVATOOLOPTIONS variables. Attackers with gateway or agent access can supply these variables to allowlisted tools like git, dotnet, or...

CVE-2026-101884

OpenClaw Windows Node versions before 2026.7.1 are vulnerable to Remote Code Execution due to an incomplete environment-variable sanitizer in the system.run function. The sanitizer fails to block critical variables including GIT_CONFIG_*, DOTNET_STARTUP_HOOKS, and JAVA_TOOL_OPTIONS. An attacker w...

CVE-2026-101884 OpenClaw Windows Node before 2026.7.1 Remote Code Execution via Environment Override

OpenClaw Windows Node before 2026.7.1 contains an incomplete environment-variable sanitizer in system.run that fails to block GITCONFIG, DOTNETSTARTUPHOOKS, and JAVATOOLOPTIONS variables. Attackers with gateway or agent access can supply these variables to allowlisted tools like git, dotnet, or...

CVE-2026-101882

OpenClaw Windows Node versions prior to 2026.7.1 are vulnerable to Remote Code Execution (RCE) due to an incomplete validation flaw in the system.execApprovals.set function. The vulnerability allows remote callers to bypass security by adding broad allow rules that accept wildcard-executable rule...

EUVD-2026-90255

OpenClaw Windows Node before 2026.7.1 contains an incomplete validation vulnerability in system.execApprovals.set that accepts wildcard-executable rules and abusable system binaries like mshta, rundll32, and certutil. Remote callers can add broad allow rules to execute arbitrary commands on the...

CVE-2026-101883

The OpenClaw Windows Node versions through 2026.9.4 are vulnerable to a Server-Side Request Forgery (SSRF) flaw within the canvas.present capability. The root cause is that canvas.present allows for the bypass of URL risk evaluations normally enforced by canvas.navigate . An attacker possessing g...

EUVD-2026-90256

OpenClaw Windows Node through 2026.9.4 contains a server-side request forgery vulnerability in the canvas.present capability that bypasses URL risk evaluation enforced by canvas.navigate. Attackers with gateway or agent access can issue canvas.present to make the node's WebView send requests to...

CVE-2026-101881 OpenClaw Windows Node before 2026.7.1 Denial of Service

OpenClaw Windows Node before 2026.7.1 contains an allocation of resources without limits vulnerability in the gateway WebSocket transport that allows connected gateways to exhaust node memory. Attackers can send an unending sequence of WebSocket continuation frames without EndOfMessage to cause...

CVE-2026-101881 OpenClaw Windows Node before 2026.7.1 Denial of Service

OpenClaw Windows Node before 2026.7.1 contains an allocation of resources without limits vulnerability in the gateway WebSocket transport that allows connected gateways to exhaust node memory. Attackers can send an unending sequence of WebSocket continuation frames without EndOfMessage to cause...

EUVD-2026-90254

OpenClaw Windows Node before 2026.7.1 contains an allocation of resources without limits vulnerability in the gateway WebSocket transport that allows connected gateways to exhaust node memory. Attackers can send an unending sequence of WebSocket continuation frames without EndOfMessage to cause...

CVE-2026-101881

The OpenClaw Windows Node software, specifically versions before 2026.7.1 , is vulnerable to a Denial of Service (DoS) condition. The root cause is an allocation of resources without limits within the gateway WebSocket transport . An attacker can exploit this by sending an unending sequence of We...

CVE-2026-101880

OpenClaw Windows Node versions before 2026.7.1 are vulnerable to an authorization bypass in the system.run exec-approval policy. The root cause is that the ExecShellWrapperParser fails to correctly split commands on pipe operators or extract command substitutions. This allows connected gateways o...

EUVD-2026-90252

OpenClaw Windows Node before 2026.7.1-3 contains a missing authorization vulnerability in NodeService capture handlers that allows connected gateways or agents to perform screen snapshots, camera snaps, and location captures without consent prompts. Attackers can invoke screen.snapshot,...

CVE-2026-101879

OpenClaw Windows Node versions prior to 2026.7.1-3 are vulnerable to a missing authorization flaw within the NodeService capture handlers. This security weakness allows connected gateways or agents to bypass consent prompts and perform unauthorized actions by invoking screen.snapshot , camera.sna...