PT-2026-26725

OpenClaw versions 2026.2.22 prior to 2026.2.25 contain a privilege escalation vulnerability allowing unpaired device identities to bypass operator pairing requirements and self-assign elevated operator scopes including operator.admin. Attackers with valid shared gateway authentication can present...

MetaGPT 代码注入漏洞

MetaGPT is a multi-agent framework developed by MetaGPT Inc. Versions of MetaGPT 0.8.1 and earlier contained a code injection vulnerability. This vulnerability stemmed from a code injection flaw in the code generate function located in the file metagpt/ext/aflow/scripts/operator.py. It could...

OpenClaw 安全漏洞

OpenClaw is an intelligent artificial assistant open-sourced by OpenClaw. OpenClaw suffers from a security vulnerability that can be exploited by an attacker to cause an authenticated caller with operator.write scope to invoke the owner-only tool interface...

GHSA-X49Q-FHHM-R9JF Duplicate Advisory: OpenClaw: WebSocket shared-auth connections could self-declare elevated scopes

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-rqpp-rjj8-7wv8. This link is maintained to preserve external references. Original Description OpenClaw versions prior to 2026.3.12 contain an authorization bypass vulnerability in the WebSocket connect path that...

CVE-2026-22172

OpenClaw versions prior to 2026.3.12 contain an authorization bypass vulnerability in the WebSocket connect path that allows shared-token or password-authenticated connections to self-declare elevated scopes without server-side binding. Attackers can exploit this logic flaw to present unauthorize...

CVE-2026-22172

OpenClaw is affected: versions prior to 2026.3.12 contain an authorization bypass in the WebSocket connect path. The flaw lets shared-token or password-authenticated connections self-declare elevated scopes without server-side binding, enabling unauthorized scopes such as operator.admin and poten...

CVE-2026-22172 OpenClaw < 2026.3.12 - Scope Elevation in WebSocket Shared-Auth Connections

OpenClaw versions prior to 2026.3.12 contain an authorization bypass vulnerability in the WebSocket connect path that allows shared-token or password-authenticated connections to self-declare elevated scopes without server-side binding. Attackers can exploit this logic flaw to present unauthorize...

CVE-2026-33252 vulnerabilities

Vulnerabilities for packages: opencost, glab, ferretdb, datadog-agent, osv-scanner, jaeger...

GHSA-Q382-VC8Q-7JHJ vulnerabilities

Vulnerabilities for packages: opencost, glab, ferretdb, datadog-agent, osv-scanner, jaeger...

GHSA-89XV-2J6F-QHC8 vulnerabilities

Vulnerabilities for packages: opencost, glab, ferretdb, datadog-agent, osv-scanner, jaeger...

GHSA-89XV-2J6F-QHC8 vulnerabilities

Vulnerabilities for packages: ferretdb, livekit-cli, gitlab-workhorse-ce, datadog-agent-fips, opencost-fips, opencost, flux-operator-fips, glab, datadog-agent, jaeger, flux-operator, gitlab-workhorse-ce-fips, jaeger-fips, osv-scanner...

GHSA-Q382-VC8Q-7JHJ vulnerabilities

Vulnerabilities for packages: ferretdb, livekit-cli, gitlab-workhorse-ce, datadog-agent-fips, opencost-fips, opencost, flux-operator-fips, glab, datadog-agent, jaeger, flux-operator, gitlab-workhorse-ce-fips, jaeger-fips, osv-scanner...

CVE-2026-33252 vulnerabilities

Vulnerabilities for packages: ferretdb, livekit-cli, gitlab-workhorse-ce, datadog-agent-fips, opencost-fips, opencost, flux-operator-fips, glab, datadog-agent, jaeger, flux-operator, gitlab-workhorse-ce-fips, jaeger-fips, osv-scanner...

CVE-2026-32025

OpenClaw versions prior to 2026.2.25 contain an authentication hardening gap in browser-origin WebSocket clients that allows attackers to bypass origin checks and auth throttling on loopback deployments. An attacker can trick a user into opening a malicious webpage and perform password brute-forc...

EUVD-2026-13298

OpenClaw versions prior to 2026.2.25 contain an authentication hardening gap in browser-origin WebSocket clients that allows attackers to bypass origin checks and auth throttling on loopback deployments. An attacker can trick a user into opening a malicious webpage and perform password brute-forc...

CVE-2026-32025 OpenClaw < 2026.2.25 - Password Brute-Force via Browser-Origin WebSocket Authentication Bypass

OpenClaw versions prior to 2026.2.25 contain an authentication hardening gap in browser-origin WebSocket clients that allows attackers to bypass origin checks and auth throttling on loopback deployments. An attacker can trick a user into opening a malicious webpage and perform password brute-forc...

CVE-2026-32025

OpenClaw versions prior to 2026.2.25 expose an authentication hardening gap in browser-origin WebSocket clients that bypasses origin checks and auth throttling on loopback deployments. An attacker enticed to visit a malicious page can perform password brute-force against the gateway to establish ...

GHSA-P77J-4MVH-X3M3 vulnerabilities

Vulnerabilities for packages: argo-rollouts, prometheus, pulumi-language-dotnet, opentelemetry-collector, spqr, grafana-alloy, crossplane-provider-keycloak, tekton-pipelines, azuredisk-csi, velero-plugin-for-aws, kube-arangodb, crossplane-provider-sql, k8sgateway, rancher-system-agent,...

CVE-2026-33186 vulnerabilities

Vulnerabilities for packages: argo-rollouts, prometheus, pulumi-language-dotnet, opentelemetry-collector, spqr, grafana-alloy, crossplane-provider-keycloak, tekton-pipelines, azuredisk-csi, velero-plugin-for-aws, kube-arangodb, crossplane-provider-sql, k8sgateway, rancher-system-agent,...

GHSA-G87J-GM7P-6VW2 Duplicate Advisory: OpenClaw's Node system.run approval hardening wrapper semantic drift can execute unintended local scripts

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-h3rm-6x7g-882f. This link is maintained to preserve external references. Original Description OpenClaw 2026.3.1 contains an approval integrity vulnerability in system.run node-host execution where argv rewriting...