PT-2026-60616

OpenClaw versions before 2026.6.9 contain a missing authorization vulnerability in Discord moderation actions. In affected versions, a lower-trust caller or configured input path could perform moderation actions that should have required a stronger authorization or policy check. Practical impact...

PT-2026-60639

OpenClaw before 2026.5.18 contain an authorization bypass vulnerability in exec allowlist glob matching that allows lower-trust callers to execute actions beyond intended authorization. Attackers can craft input paths that traverse the allowlist glob patterns to execute or persist unauthorized...

PT-2026-60622

OpenClaw before 2026.5.28 contains a race condition in the MS Teams safeFetch DNS rebinding check. When the affected feature is enabled and reachable, a lower-trust caller or configured input path could win a timing window between the DNS validation check and use, allowing actions that should hav...

PT-2026-60628

Name of the Vulnerable Software and Affected Versions OpenClaw versions 2026.1.20 through 2026.5.26 Description An authorization bypass exists in the device.pair.approve feature. This flaw allows callers with lower trust levels to circumvent role-management checks, enabling them to perform action...

PT-2026-60630

Name of the Vulnerable Software and Affected Versions OpenClaw versions 2026.2.25 through 2026.5.25 Description A flaw allows a lower-trust caller or configured input path to bypass non-browser rate limits during WebSocket authentication attempts. If the affected feature is enabled and accessible...

PT-2026-60637

Name of the Vulnerable Software and Affected Versions OpenClaw versions 2026.4.14 through 2026.5.25 Description An issue exists in the browser snapshot routes where post-navigation destinations are not properly validated. This allows attackers with lower-trust access to perform Server-Side Reques...

PT-2026-60613

Name of the Vulnerable Software and Affected Versions OpenClaw versions 2026.6.1 through 2026.6.8 Description Isolated cron jobs contain a privilege escalation issue that allows lower-trust callers to regain access to denied execution tools. Attackers can execute or persist actions beyond their...

PT-2026-60615

Name of the Vulnerable Software and Affected Versions OpenClaw versions 2026.4.12-beta.1 through 2026.6.5 Description The MS Teams message actions feature contains a missing-authorization flaw. This allows a lower-trust caller or a configured input path to execute actions that normally require...

CVE-2026-62205: Missing Authorization

OpenClaw versions 2026.4.12-beta.1 before 2026.6.6 contain a missing-authorization vulnerability in the MS Teams message actions feature. When the affected feature is enabled and reachable, a lower-trust caller or a configured input path can perform actions that should have required a stronger...

PT-2026-60618

OpenClaw before 2026.6.5 could forward Authorization headers during MCP SSE redirects. When the affected feature is enabled and reachable, a lower-trust caller or configured input path could execute or persist actions beyond the caller's intended authorization. Impact depends on the operator's...

CVE-2026-15265 Tenable Agent Path Traversal Leading to Remote Code Execution

A path traversal vulnerability in Tenable Agent 11.2.0 and 11.1.3 and lower allows a privileged attacker to write arbitrary files outside the intended plugin directory, potentially leading to remote code execution...

Symlink Attack

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Symlink Attack via the mirror sync process. An attacker can bypass policy checks and authorization boundaries by exploiting remote symlink parents when the feature is enabled and reachabl...

EUVD-2026-43534

OpenClaw versions 2026.5.20 before 2026.6.9 contain a privilege escalation vulnerability in plugin install commands that allows lower-trust callers to execute or persist actions beyond their intended authorization. Attackers can exploit misconfigured input paths or enabled features to escalate...

EUVD-2026-43569

OpenClaw versions 2026.6.6 before 2026.6.9 contain an authorization bypass vulnerability in message mutation handling that allows lower-trust callers to perform actions requiring stronger authorization checks. Attackers can exploit misconfigured input paths to skip requester authorization and...

EUVD-2026-43566

OpenClaw @openclaw/feishu versions 2026.6.6 and earlier contain an incorrect authorization vulnerability in which the Feishu permission tools could ignore per-account disablement settings. When the affected feature is enabled and reachable, a lower-trust caller or configured input path could...

EUVD-2026-43571

OpenClaw versions 2026.6.5 before 2026.6.9 contain a vulnerability in the plugin install wrappers that could skip the install policy authorization check. When the affected feature is enabled and reachable, a lower-trust caller or a configured input path could execute or persist actions beyond the...

EUVD-2026-43565

OpenClaw Feishu tools npm package @openclaw/feishu in versions = 2026.6.6 could ignore per-account disablement. A lower-trust caller or a configured input path could perform actions that should have required a stronger authorization or policy check, resulting in unauthorized operations. The issue...

EUVD-2026-43568

OpenClaw versions before 2026.6.9 contain an authorization bypass vulnerability in the flock wrapper that allows lower-trust callers to execute or persist actions beyond their intended authorization. Attackers can leverage configured input paths to bypass durable exec approval binding and perform...

EUVD-2026-43570

OpenClaw versions 2026.6.6 before 2026.6.9 contain an authorization bypass vulnerability in Discord guild actions that allows lower-trust callers to perform actions requiring stronger authorization checks. Attackers can exploit misconfigured input paths to skip cross-provider requester...

CVE-2026-62195

OpenClaw versions 2026.5.20 before 2026.6.6 contain an authorization bypass vulnerability in the MCP loopback feature that allows lower-trust callers to execute owner-only tools. Attackers can bypass authorization checks through configured input paths to execute or persist actions beyond their...