OpenClaw backlink vulnerability (CNVD-2026-14861)

OpenClaw is an intelligent artificial assistant open-sourced by OpenClaw. OpenClaw suffers from a backlink vulnerability that can be exploited by an attacker to read and write files outside the agent's workspace, which in turn can be used to execute code via a file overwrite attack...

OpenClaw Authentication Bypass Vulnerability (CNVD-2026-14839)

OpenClaw is an intelligent artificial assistant open-sourced by OpenClaw. OpenClaw suffers from an authentication bypass vulnerability caused by a /api/channels route classification flaw due to a mismatch in the depth of normalization between authentication path classification and route path...

OpenClaw path traversal vulnerability (CNVD-2026-14856)

OpenClaw is an intelligent artificial assistant open-sourced by OpenClaw. OpenClaw suffers from a path traversal vulnerability that can be exploited by an attacker to bypass group message access control...

OpenClaw OS Command Injection Vulnerability (CNVD-2026-15059)

OpenClaw is an automation tool for executing system commands. An authentication bypass vulnerability exists in versions prior to OpenClaw 2026.2.21 that stems from the system failing to enforce secure authentication when the allowInsecureAuth setting is explicitly enabled and the gateway is expos...

CVE-2026-32911

Rejected reason: This CVE ID has been rejected...

CVE-2026-32913

OpenClaw before 2026.3.7 contains an improper header validation vulnerability in fetchWithSsrFGuard that forwards custom authorization headers across cross-origin redirects. Attackers can trigger redirects to different origins to intercept sensitive headers like X-Api-Key and Private-Token intend...

CVE-2026-32912

Rejected reason: This CVE ID has been rejected...

CVE-2026-32904

Rejected reason: This CVE ID has been rejected...

CVE-2026-32909

Rejected reason: This CVE ID has been rejected...

CVE-2026-32910

Rejected reason: This CVE ID has been rejected...

CVE-2026-32901

Rejected reason: This CVE ID has been rejected...

CVE-2026-32903

Rejected reason: This CVE ID has been rejected...

CVE-2026-32902

Rejected reason: This CVE ID has been rejected...

CVE-2026-32012

Rejected reason: This CVE ID has been rejected...

CVE-2026-32066

Rejected reason: This CVE ID has been rejected...

CVE-2026-32047

Rejected reason: This CVE ID has been rejected...

CVE-2026-22173

Rejected reason: This CVE ID has been rejected...

CVE-2026-28455

Rejected reason: This CVE ID has been rejected...

CVE-2026-27183

OpenClaw versions prior to 2026.3.7 contain a shell approval gating bypass vulnerability in system.run dispatch-wrapper handling that allows attackers to skip shell wrapper approval requirements. The approval classifier and execution planner apply different depth-boundary rules, permitting exactl...

CVE-2026-27646

OpenClaw versions prior to 2026.3.7 contain a sandbox escape vulnerability in the /acp spawn command that allows authorized sandboxed sessions to initialize host-side ACP runtime. Attackers can bypass sandbox restrictions by invoking the /acp spawn slash-command to cross from sandboxed chat conte...