The vulnerability of the stripBotMention() function in the AI agent OpenClaw (previously known as ClawdBot or MoltBot) allows a violator to trigger a service denial.

The vulnerability of the stripBotMention function in the AI agent OpenClaw previously known as ClawdBot or MoltBot is related to the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the AI agent OpenClaw (formerly known as ClawdBot or MoltBot) arises from the improper handling of symbolic links before accessing a file. This vulnerability allows attackers to write arbitrary files.

The vulnerability of the AI agent OpenClaw formerly known as ClawdBot or MoltBot is related to the improper handling of symbolic links before accessing a file. Exploiting this vulnerability allows an attacker to write arbitrary files...

The vulnerability of the AI agent OpenClaw (formerly known as ClawdBot or MoltBot) arises from an incorrect restriction on the path name to the restricted-access catalog, allowing attackers to read arbitrary files.

The vulnerability of the AI agent OpenClaw formerly known as ClawdBot or MoltBot is related to an incorrect restriction on the path name to the restricted-access catalog. Exploiting this vulnerability allows a malicious actor, operating remotely, to read arbitrary files...

The vulnerability of the Synology-chat module of the AI agent OpenClaw (formerly known as ClawdBot or MoltBot) allows a hacker to bypass existing security mechanisms.

The vulnerability of the Synology-chat module of the AI agent OpenClaw formerly known as ClawdBot or MoltBot is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass existing security mechanisms remotely...

The vulnerability of the stageSandboxMedia() function in the AI agent OpenClaw (previously ClawdBot or MoltBot) allows a violator to write any files they want.

The vulnerability of the stageSandboxMedia function in the AI agent OpenClaw previously ClawdBot or MoltBot is related to an incorrect definition of symbolic references before accessing a file. Exploiting this vulnerability allows a hacker to write arbitrary files...

The vulnerability in the `src/node-host/invoke-system-run-plan.ts` script of the AI agent OpenClaw (previously known as ClawdBot or MoltBot) allows a perpetrator to execute arbitrary code.

The vulnerability in the src/node-host/invoke-system-run-plan.ts script of the AI agent OpenClaw previously known as ClawdBot or MoltBot relates to the implementation or modification of arguments. Exploiting this vulnerability allows a perpetrator to execute arbitrary code...

The vulnerability of the configuration tools.exec.security=allowlist in the AI agent OpenClaw (previously – ClawdBot or MoltBot) allows a violator to execute arbitrary commands.

The vulnerability of the “tools.exec.security=allowlist” configuration in the AI agent OpenClaw previously – ClawdBot or MoltBot is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the AI agent OpenClaw (formerly known as ClawdBot or MoltBot) arises from insufficient validation of requests on the server side. This allows attackers to execute SSRF attacks.

The vulnerability of the AI agent OpenClaw formerly known as ClawdBot or MoltBot is related to insufficient validation of requests on the server side. Exploiting this vulnerability allows a malicious actor to perform an SSRF attack remotely...

The vulnerability of the AI agent OpenClaw (formerly known as ClawdBot or MoltBot) involves unlimited distribution of resources, allowing a hacker to cause a service failure.

The vulnerability of the AI agent OpenClaw formerly known as ClawdBot or MoltBot is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a remote attacker to cause service failures...

The vulnerability of the HMAC algorithm (Hash-based Message Authentication Code) of the AI agent OpenClaw (formerly known as ClawdBot or MoltBot) allows a perpetrator to compromise the integrity and accessibility of the protected information.

The vulnerability of the HMAC-based Message Authentication Code algorithm used by the AI agent OpenClaw formerly known as ClawdBot or MoltBot relates to the possibility of bypassing the authentication process. Exploiting this vulnerability could allow a malicious actor to compromise the integrity...

The vulnerability of the collectConfigEnvVars() function in the OpenClaw AI agent (previously known as ClawdBot or MoltBot) allows a violator to execute arbitrary code.

The vulnerability of the collectConfigEnvVars function in the OpenClaw AI agent previously known as ClawdBot or MoltBot is related to errors in system configuration or settings. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the allowlist mode of the AI agent OpenClaw (formerly known as ClawdBot or MoltBot) allows a violator to bypass existing security mechanisms.

The vulnerability of the allowlist mode of the AI agent OpenClaw formerly ClawdBot or MoltBot is related to the use of an incomplete black list. Exploiting this vulnerability allows a malicious actor to bypass existing security mechanisms remotely...

The vulnerability of the tools.exec.safeBins configuration in the AI agent OpenClaw (previously known as ClawdBot or MoltBot) allows a hacker to bypass existing security mechanisms.

The vulnerability of the tools.exec.safeBins configuration in the AI agent OpenClaw previously known as ClawdBot or MoltBot relates to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a perpetrator to bypass existing security mechanisms...

The vulnerability in the src/infra/archive.ts script of the AI agent OpenClaw (previously known as ClawdBot or MoltBot) allows a violator to write arbitrary files.

The vulnerability in the src/infra/archive.ts script of the AI agent OpenClaw previously known as ClawdBot or MoltBot is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker to write arbitrary files...

EUVD-2026-21622

OpenClaw Canvas Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of OpenClaw. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the the authenticatio...

CVE-2026-3691

OpenClaw Client PKCE Verifier Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose stored credentials on affected installations of OpenClaw. User interaction is required to exploit this vulnerability in that the target must initiate an OAuth authorization...

CVE-2026-3690

OpenClaw Canvas Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of OpenClaw. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the the authenticatio...

CVE-2026-3689

OpenClaw Canvas Path Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of OpenClaw. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of the pa...

CVE-2026-3691 OpenClaw Client PKCE Verifier Information Disclosure Vulnerability

OpenClaw Client PKCE Verifier Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose stored credentials on affected installations of OpenClaw. User interaction is required to exploit this vulnerability in that the target must initiate an OAuth authorization...

EUVD-2026-21623

OpenClaw Client PKCE Verifier Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose stored credentials on affected installations of OpenClaw. User interaction is required to exploit this vulnerability in that the target must initiate an OAuth authorization...