CVE-2026-22172

OpenClaw versions prior to 2026.3.12 contain an authorization bypass vulnerability in the WebSocket connect path that allows shared-token or password-authenticated connections to self-declare elevated scopes without server-side binding. Attackers can exploit this logic flaw to present unauthorize...

CVE-2026-22172

OpenClaw is affected: versions prior to 2026.3.12 contain an authorization bypass in the WebSocket connect path. The flaw lets shared-token or password-authenticated connections self-declare elevated scopes without server-side binding, enabling unauthorized scopes such as operator.admin and poten...

CVE-2026-22172 OpenClaw < 2026.3.12 - Scope Elevation in WebSocket Shared-Auth Connections

OpenClaw versions prior to 2026.3.12 contain an authorization bypass vulnerability in the WebSocket connect path that allows shared-token or password-authenticated connections to self-declare elevated scopes without server-side binding. Attackers can exploit this logic flaw to present unauthorize...

CVE-2026-33252 vulnerabilities

Vulnerabilities for packages: jaeger, glab, opencost, osv-scanner, ferretdb, datadog-agent...

GHSA-89XV-2J6F-QHC8 vulnerabilities

Vulnerabilities for packages: jaeger, glab, opencost, osv-scanner, ferretdb, datadog-agent...

GHSA-Q382-VC8Q-7JHJ vulnerabilities

Vulnerabilities for packages: jaeger, glab, opencost, osv-scanner, ferretdb, datadog-agent...

GHSA-89XV-2J6F-QHC8 vulnerabilities

Vulnerabilities for packages: gitlab-workhorse-ce, datadog-agent, opencost, osv-scanner, gitlab-workhorse-ce-fips, flux-operator, jaeger, jaeger-fips, opencost-fips, ferretdb, datadog-agent-fips, glab, flux-operator-fips, livekit-cli...

CVE-2026-33252 vulnerabilities

Vulnerabilities for packages: gitlab-workhorse-ce, datadog-agent, opencost, osv-scanner, gitlab-workhorse-ce-fips, flux-operator, jaeger, jaeger-fips, opencost-fips, ferretdb, datadog-agent-fips, glab, flux-operator-fips, livekit-cli...

GHSA-Q382-VC8Q-7JHJ vulnerabilities

Vulnerabilities for packages: gitlab-workhorse-ce, datadog-agent, opencost, osv-scanner, gitlab-workhorse-ce-fips, flux-operator, jaeger, jaeger-fips, opencost-fips, ferretdb, datadog-agent-fips, glab, flux-operator-fips, livekit-cli...

CVE-2026-32025

OpenClaw versions prior to 2026.2.25 contain an authentication hardening gap in browser-origin WebSocket clients that allows attackers to bypass origin checks and auth throttling on loopback deployments. An attacker can trick a user into opening a malicious webpage and perform password brute-forc...

EUVD-2026-13298

OpenClaw versions prior to 2026.2.25 contain an authentication hardening gap in browser-origin WebSocket clients that allows attackers to bypass origin checks and auth throttling on loopback deployments. An attacker can trick a user into opening a malicious webpage and perform password brute-forc...

CVE-2026-32025 OpenClaw < 2026.2.25 - Password Brute-Force via Browser-Origin WebSocket Authentication Bypass

OpenClaw versions prior to 2026.2.25 contain an authentication hardening gap in browser-origin WebSocket clients that allows attackers to bypass origin checks and auth throttling on loopback deployments. An attacker can trick a user into opening a malicious webpage and perform password brute-forc...

CVE-2026-32025

OpenClaw versions prior to 2026.2.25 expose an authentication hardening gap in browser-origin WebSocket clients that bypasses origin checks and auth throttling on loopback deployments. An attacker enticed to visit a malicious page can perform password brute-force against the gateway to establish ...

GHSA-P77J-4MVH-X3M3 vulnerabilities

Vulnerabilities for packages: net-kourier, multus-cni, flux, promxy, knative-serving, gitea, flux-source-controller, minio-object-browser, terraform-docs, crossplane-provider-azure-sql, trufflehog, scorecard, fuse-overlayfs-snapshotter, mesosphere-vsphere-csi, mountpoint-s3-csi-driver, k8sgateway...

CVE-2026-33186 vulnerabilities

Vulnerabilities for packages: net-kourier, multus-cni, flux, promxy, knative-serving, gitea, flux-source-controller, minio-object-browser, terraform-docs, crossplane-provider-azure-sql, trufflehog, scorecard, fuse-overlayfs-snapshotter, mesosphere-vsphere-csi, mountpoint-s3-csi-driver, k8sgateway...

GHSA-G87J-GM7P-6VW2 Duplicate Advisory: OpenClaw's Node system.run approval hardening wrapper semantic drift can execute unintended local scripts

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-h3rm-6x7g-882f. This link is maintained to preserve external references. Original Description OpenClaw 2026.3.1 contains an approval integrity vulnerability in system.run node-host execution where argv rewriting...

EUVD-2026-13016

OpenClaw 2026.3.1 contains an approval integrity vulnerability in system.run node-host execution where argv rewriting changes command semantics. Attackers can place malicious local scripts in the working directory to execute unintended code despite operator approval of different command text...

Duplicate Advisory: OpenClaw macOS companion app (beta): allowlist parsing mismatch for system.run shell chains

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-5f9p-f3w2-fwch. This link is maintained to preserve external references. Original Description OpenClaw versions prior to 2026.2.22 contain an allowlist parsing mismatch vulnerability in the macOS companion app...

CVE-2026-31993

CVE-2026-31993 affects the OpenClaw macOS companion app, with versions prior to 2026.2.22. The issue is a allowlist parsing mismatch in system.run shell chains that allows authenticated operators to bypass exec approval checks, enabling arbitrary command execution on the paired host when paired w...

CVE-2026-31993 OpenClaw < 2026.2.22 - Allowlist Parsing Mismatch in system.run Shell Chains

OpenClaw versions prior to 2026.2.22 contain an allowlist parsing mismatch vulnerability in the macOS companion app that allows authenticated operators to bypass exec approval checks. Attackers with operator.write privileges and a paired macOS beta node can craft shell-chain payloads that pass...