10625 matches found
CVE-2026-100558
OpenClaw versions prior to 2026.8.1 are susceptible to a resource exhaustion vulnerability within the Gateway listener . This flaw allows unauthenticated clients to retain response sockets by submitting WebSocket upgrade requests that do not align with expected connection semantics. By repeatedly...
CVE-2026-100557
OpenClaw versions before 2026.8.1 contain an authorization bypass vulnerability in skill tool dispatch that fails to carry the sender's owner status. Non-owner senders authorized to invoke skill commands can access owner-only tools and server credentials reserved for owners...
CVE-2026-100557
Versions of OpenClaw prior to 2026.8.1 are vulnerable to an authorization bypass within the skill tool dispatch. The root cause is a failure to propagate the sender's owner status, which allows non-owner users authorized to invoke skill commands to access owner-only tools and server credentials r...
CVE-2026-100556 OpenClaw before 2026.8.1 Authentication Bypass via Session Reset
OpenClaw npm package openclaw versions = 2026.5.2 and command to reset the shared group session and persist a provider and model override. This allows a command-denied group member to select a provider and model already permitted by the operator for subsequent turns in the shared group session,...
@0xwork/connect (>=0.1.8, <=0.1.9), @chrysb/alphaclaw (>=0.9.13, <=0.9.34) +10 more potentially affected by CVE-2026-100556 via openclaw (>=2026.5.2, <=2026.7.1)
openclaw NPM version =2026.5.2, =0.1.8, =0.9.13, =2.2.4, =4.0.0, =0.2.5, =1.1.50, =2.1.8, =0.0.1-release20260506, =0.1.38, =0.3.1-next.0, =1.0.0, =1.3.1 Source cves: CVE-2026-100556 Source advisory: MEND:CVE-2026-100556...
CVE-2026-100556 OpenClaw before 2026.8.1 Authentication Bypass via Session Reset
OpenClaw npm package openclaw versions = 2026.5.2 and command to reset the shared group session and persist a provider and model override. This allows a command-denied group member to select a provider and model already permitted by the operator for subsequent turns in the shared group session,...
EUVD-2026-87494
OpenClaw npm package openclaw versions = 2026.5.2 and command to reset the shared group session and persist a provider and model override. This allows a command-denied group member to select a provider and model already permitted by the operator for subsequent turns in the shared group session,...
CVE-2026-100556 OpenClaw before 2026.8.1 Authentication Bypass via Session Reset
OpenClaw npm package openclaw versions = 2026.5.2 and command to reset the shared group session and persist a provider and model override. This allows a command-denied group member to select a provider and model already permitted by the operator for subsequent turns in the shared group session,...
CVE-2026-100556
OpenClaw npm package openclaw versions = 2026.5.2 and command to reset the shared group session and persist a provider and model override. This allows a command-denied group member to select a provider and model already permitted by the operator for subsequent turns in the shared group session,...
CVE-2026-100556
The OpenClaw npm package (versions >= 2026.5.2 and < 2026.8.1 ) contains an incorrect authorization vulnerability within WhatsApp group handling. An attacker who is permitted to send ordinary messages but restricted from using owner commands can exploit this by issuing the /new command. Th...
CVE-2026-100555 OpenClaw before 2026.8.1 DNS Rebinding via attachment delivery
OpenClaw is an npm-distributed gateway application. In versions = 2026.7.1 and 2026.8.1, Synology Chat attachment delivery could lose DNS pinning: the Gateway validated a single DNS result for a supplied file URL but then passed the original hostname to the Synology NAS, where it could resolve to...
CVE-2026-100555 OpenClaw before 2026.8.1 DNS Rebinding via attachment delivery
OpenClaw is an npm-distributed gateway application. In versions = 2026.7.1 and 2026.8.1, Synology Chat attachment delivery could lose DNS pinning: the Gateway validated a single DNS result for a supplied file URL but then passed the original hostname to the Synology NAS, where it could resolve to...
EUVD-2026-87496
OpenClaw npm package 'openclaw' versions = 2026.5.12 and 2026.8.1 do not immediately invalidate Canvas HTTP authorization when a paired node is revoked. Node revocation invalidates the WebSocket client, but Canvas HTTP authorization continues to accept and renew the previously granted capability...
EUVD-2026-87495
OpenClaw is an npm-distributed gateway application. In versions = 2026.7.1 and 2026.8.1, Synology Chat attachment delivery could lose DNS pinning: the Gateway validated a single DNS result for a supplied file URL but then passed the original hostname to the Synology NAS, where it could resolve to...
CVE-2026-100555
OpenClaw is an npm-distributed gateway application. In versions = 2026.7.1 and 2026.8.1, Synology Chat attachment delivery could lose DNS pinning: the Gateway validated a single DNS result for a supplied file URL but then passed the original hostname to the Synology NAS, where it could resolve to...
CVE-2026-100554 OpenClaw before 2026.8.1 Canvas Capability Revocation Bypass
OpenClaw npm package 'openclaw' versions = 2026.5.12 and 2026.8.1 do not immediately invalidate Canvas HTTP authorization when a paired node is revoked. Node revocation invalidates the WebSocket client, but Canvas HTTP authorization continues to accept and renew the previously granted capability...
CVE-2026-100554 OpenClaw before 2026.8.1 Canvas Capability Revocation Bypass
OpenClaw npm package 'openclaw' versions = 2026.5.12 and 2026.8.1 do not immediately invalidate Canvas HTTP authorization when a paired node is revoked. Node revocation invalidates the WebSocket client, but Canvas HTTP authorization continues to accept and renew the previously granted capability...
CVE-2026-100554 OpenClaw before 2026.8.1 Canvas Capability Revocation Bypass
OpenClaw npm package 'openclaw' versions = 2026.5.12 and 2026.8.1 do not immediately invalidate Canvas HTTP authorization when a paired node is revoked. Node revocation invalidates the WebSocket client, but Canvas HTTP authorization continues to accept and renew the previously granted capability...
CVE-2026-100555 OpenClaw before 2026.8.1 DNS Rebinding via attachment delivery
OpenClaw is an npm-distributed gateway application. In versions = 2026.7.1 and 2026.8.1, Synology Chat attachment delivery could lose DNS pinning: the Gateway validated a single DNS result for a supplied file URL but then passed the original hostname to the Synology NAS, where it could resolve to...
@0xwork/connect (>=0.1.8, <=0.1.9), @chrysb/alphaclaw (>=0.9.17, <=0.9.34) +6 more potentially affected by CVE-2026-100554 via openclaw (>=2026.5.20, <=2026.7.1)
openclaw NPM version =2026.5.20, =0.1.8, =0.9.17, =0.2.6, =1.1.50, =0.0.1-release20260506, =0.3.1-next.0, =1.0.0, =1.3.1 Source cves: CVE-2026-100554 Source advisory: MEND:CVE-2026-100554...