openclaw-dashboard

OpenClaw 에이전트 대시보드 OpenClaw 에이전트를 위한 아름답고 안전하며 실시간 모니터링 대시보드입니다. 세션 추적, API 사용량 모니터링, 비용 확인, 메모리 파일 관리, 시스템 상태 확인을 한곳에서 수행할 수 있습니다. 📸 스크린샷 개요| 세션| 비용 ---|---|--- | | 속도 제한| 라이브 피드| 로그 ---|---|--- | |...

CVE-2026-30741

보안 권고: CVE-2026-30741 제품: OpenClaw 에이전트 플랫폼 영향을 받는 버전: v2026.2.6 및 이전 버전 취약점 유형: 요청 측 프롬프트 인젝션Request-Side Prompt Injection을 통한 원격 코드 실행RCE 설명: 업스트림 API 요청에 대한 무결성 검증 부재로 인해 요청 스트림 오염request-stream poisoning이 가능합니다. 이로 인해 고성능 모델이 인간의 확인 없이 MCP 도구를 통해 실행되는 무단 터미널 명령을 생성하게 됩니다. 📺 개념 증명PoC 귀하의 브라우저는...

The vulnerability of the Tlon plugin (Urbit), which targets the AI agent OpenClaw (previously ClawdBot or MoltBot), allows a hacker to perform an SSRF attack.

The vulnerability of the Tlon plugin Urbit, which is part of the AI agent OpenClaw previously known as ClawdBot or MoltBot, stems from insufficient validation of requests on the server side. Exploiting this vulnerability allows a remote attacker to execute an SSRF attack...

The vulnerability in the `src/auto-reply/reply/commands-approve.ts` script of the AI agent OpenClaw (previously known as ClawdBot or MoltBot) allows a violator to bypass existing security mechanisms.

The vulnerability in the src/auto-reply/reply/commands-approve.ts script of the AI agent OpenClaw previously known as ClawdBot or MoltBot is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to bypass existing security mechanisms...

Malicious code in @signetai/signet-memory-openclaw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b16e55a5379336a0ab822ee9fe70b20023e452595f41cfe2624464aadb73d390 On plugin load, register invokes installFetchSanitizer dist/index.js:14420-14463 which monkey-patches globalThis.fetch. For requests to...

MAL-2026-4183 Malicious code in openclaw-agent (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b89b6a94f589218276e6dabe5accf4a6d6a9b22cd7412cce0a58069bccd76bbb The package is intended to create a backdoor and steal sensitive data, but the analyzed code did not finally exfiltrate the content of sensitive files. ---...

Malicious code in openclaw-agent (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b89b6a94f589218276e6dabe5accf4a6d6a9b22cd7412cce0a58069bccd76bbb The package is intended to create a backdoor and steal sensitive data, but the analyzed code did not finally exfiltrate the content of sensitive files. ---...

The vulnerabilities in the src/browser/routes/agent.act.ts and src/browser/pw-tools-core.interactions.ts files of the AI agent OpenClaw (formerly ClawdBot or MoltBot) allow a violator to execute arbitrary commands.

The vulnerability in the src/browser/routes/agent.act.ts and src/browser/pw-tools-core.interactions.ts files of the AI agent OpenClaw formerly ClawdBot or MoltBot is related to the lack of authentication for a critical function. Exploiting this vulnerability allows an attacker to execute arbitrar...

The vulnerability of the shell-env package for the AI agent OpenClaw (formerly known as ClawdBot or MoltBot) allows a perpetrator to execute arbitrary code.

The vulnerability of the shell-env package for the AI agent OpenClaw formerly known as ClawdBot or MoltBot lies in the inclusion of functions from an unverified and uncontrolled area. Exploiting this vulnerability could allow a perpetrator to execute arbitrary code...

The vulnerability of the os.tmpdir() function in the /feishu/src/media.ts script of the AI agent OpenClaw (formerly ClawdBot or MoltBot) allows a violator to write any files they desire.

The vulnerability of the os.tmpdir function in the /feishu/src/media.ts script of the AI agent OpenClaw previously known as ClawdBot or MoltBot is related to an incorrect restriction on the path name of the temp directory. Exploiting this vulnerability allows a remote attacker to write arbitrary...

The vulnerability in the extensions/lobster/src/lobster-tool.ts script of the AI agent OpenClaw (previously known as ClawdBot or MoltBot) allows a violator to execute arbitrary commands.

The vulnerability in the extensions/lobster/src/lobster-tool.ts script of the AI agent OpenClaw previously known as ClawdBot or MoltBot relates to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a perpetrator to execute arbitrary commands...

The vulnerability of the HMAC algorithm (Hash-based Message Authentication Code) of the AI agent OpenClaw (formerly known as ClawdBot or MoltBot) allows a perpetrator to compromise the integrity and accessibility of the protected information.

The vulnerability of the HMAC-based Message Authentication Code algorithm used by the AI agent OpenClaw formerly known as ClawdBot or MoltBot relates to the possibility of bypassing the authentication process. Exploiting this vulnerability could allow a malicious actor to compromise the integrity...

The vulnerability in the src/daemon/schtasks.ts script of the AI agent OpenClaw (previously known as ClawdBot or MoltBot) allows a perpetrator to execute arbitrary commands.

The vulnerability in the src/daemon/schtasks.ts script of the AI agent OpenClaw previously known as ClawdBot or MoltBot relates to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a perpetrator to execute arbitrary commands...

EUVD-2026-11205

A remote code execution RCE vulnerability in OpenClaw Agent Platform v2026.2.6 allows attackers to execute arbitrary code via a Request-Side prompt injection attack...

CVE-2026-30741

A remote code execution RCE vulnerability in OpenClaw Agent Platform v2026.2.6 allows attackers to execute arbitrary code via a Request-Side prompt injection attack...

CVE-2026-30741

A remote code execution RCE vulnerability in OpenClaw Agent Platform v2026.2.6 allows attackers to execute arbitrary code via a Request-Side prompt injection attack...

CVE-2026-30741

A remote code execution RCE vulnerability in OpenClaw Agent Platform v2026.2.6 allows attackers to execute arbitrary code via a Request-Side prompt injection attack...

CVE-2026-30741

The OpenClaw Agent Platform (version v2026.2.6 and earlier) is vulnerable to Remote Code Execution (RCE) due to a Request-Side prompt injection attack. The root cause is a lack of integrity validation for upstream API requests, which enables request-stream poisoning . This allows an attacker to t...

CVE-2026-30741

A remote code execution RCE vulnerability in OpenClaw Agent Platform v2026.2.6 allows attackers to execute arbitrary code via a Request-Side prompt injection attack...

CVE-2026-30741: Improper Control of Generation of Code

A remote code execution RCE vulnerability in OpenClaw Agent Platform v2026.2.6 allows attackers to execute arbitrary code via a Request-Side prompt injection attack...