OpenClaw 安全漏洞

OpenClaw is an intelligent artificial assistant open-sourced by OpenClaw. OpenClaw suffers from a security vulnerability that can be exploited by an attacker to cause an authenticated caller with operator.write scope to invoke the owner-only tool interface...

MetaGPT 代码注入漏洞

MetaGPT is a multi-agent framework developed by MetaGPT Inc. Versions of MetaGPT 0.8.1 and earlier contained a code injection vulnerability. This vulnerability stemmed from a code injection flaw in the code generate function located in the file metagpt/ext/aflow/scripts/operator.py. It could...

GHSA-X49Q-FHHM-R9JF Duplicate Advisory: OpenClaw: WebSocket shared-auth connections could self-declare elevated scopes

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-rqpp-rjj8-7wv8. This link is maintained to preserve external references. Original Description OpenClaw versions prior to 2026.3.12 contain an authorization bypass vulnerability in the WebSocket connect path that...

CVE-2026-22172

OpenClaw versions prior to 2026.3.12 contain an authorization bypass vulnerability in the WebSocket connect path that allows shared-token or password-authenticated connections to self-declare elevated scopes without server-side binding. Attackers can exploit this logic flaw to present unauthorize...

CVE-2026-22172

OpenClaw is affected: versions prior to 2026.3.12 contain an authorization bypass in the WebSocket connect path. The flaw lets shared-token or password-authenticated connections self-declare elevated scopes without server-side binding, enabling unauthorized scopes such as operator.admin and poten...

CVE-2026-22172 OpenClaw < 2026.3.12 - Scope Elevation in WebSocket Shared-Auth Connections

OpenClaw versions prior to 2026.3.12 contain an authorization bypass vulnerability in the WebSocket connect path that allows shared-token or password-authenticated connections to self-declare elevated scopes without server-side binding. Attackers can exploit this logic flaw to present unauthorize...

CVE-2026-33252 vulnerabilities

Vulnerabilities for packages: glab, osv-scanner, jaeger, opencost, ferretdb, datadog-agent...

GHSA-89XV-2J6F-QHC8 vulnerabilities

Vulnerabilities for packages: glab, osv-scanner, jaeger, opencost, ferretdb, datadog-agent...

GHSA-Q382-VC8Q-7JHJ vulnerabilities

Vulnerabilities for packages: glab, osv-scanner, jaeger, opencost, ferretdb, datadog-agent...

GHSA-89XV-2J6F-QHC8 vulnerabilities

Vulnerabilities for packages: jaeger-fips, opencost, flux-operator-fips, gitlab-workhorse-ce-fips, glab, ferretdb, osv-scanner, jaeger, livekit-cli, opencost-fips, gitlab-workhorse-ce, flux-operator, datadog-agent, datadog-agent-fips...

CVE-2026-33252 vulnerabilities

Vulnerabilities for packages: jaeger-fips, opencost, flux-operator-fips, gitlab-workhorse-ce-fips, glab, ferretdb, osv-scanner, jaeger, livekit-cli, opencost-fips, gitlab-workhorse-ce, flux-operator, datadog-agent, datadog-agent-fips...

GHSA-Q382-VC8Q-7JHJ vulnerabilities

Vulnerabilities for packages: jaeger-fips, opencost, flux-operator-fips, gitlab-workhorse-ce-fips, glab, ferretdb, osv-scanner, jaeger, livekit-cli, opencost-fips, gitlab-workhorse-ce, flux-operator, datadog-agent, datadog-agent-fips...

CVE-2026-32025

OpenClaw versions prior to 2026.2.25 contain an authentication hardening gap in browser-origin WebSocket clients that allows attackers to bypass origin checks and auth throttling on loopback deployments. An attacker can trick a user into opening a malicious webpage and perform password brute-forc...

EUVD-2026-13298

OpenClaw versions prior to 2026.2.25 contain an authentication hardening gap in browser-origin WebSocket clients that allows attackers to bypass origin checks and auth throttling on loopback deployments. An attacker can trick a user into opening a malicious webpage and perform password brute-forc...

CVE-2026-32025 OpenClaw < 2026.2.25 - Password Brute-Force via Browser-Origin WebSocket Authentication Bypass

OpenClaw versions prior to 2026.2.25 contain an authentication hardening gap in browser-origin WebSocket clients that allows attackers to bypass origin checks and auth throttling on loopback deployments. An attacker can trick a user into opening a malicious webpage and perform password brute-forc...

CVE-2026-32025

OpenClaw versions prior to 2026.2.25 expose an authentication hardening gap in browser-origin WebSocket clients that bypasses origin checks and auth throttling on loopback deployments. An attacker enticed to visit a malicious page can perform password brute-force against the gateway to establish ...

GHSA-P77J-4MVH-X3M3 vulnerabilities

Vulnerabilities for packages: flux, cluster-api-aws-controller, juicefs-csi-driver, opa-envoy, dapr, vcluster, harbor, docker-compose, pulumi-language-yaml, witness, spiffe-helper, crossplane-provider-azure-managedidentity, caddy, node-problem-detector, crossplane-provider-aws-kinesis,...

CVE-2026-33186 vulnerabilities

Vulnerabilities for packages: flux, cluster-api-aws-controller, juicefs-csi-driver, opa-envoy, dapr, vcluster, harbor, docker-compose, pulumi-language-yaml, witness, spiffe-helper, crossplane-provider-azure-managedidentity, caddy, node-problem-detector, crossplane-provider-aws-kinesis,...

GHSA-G87J-GM7P-6VW2 Duplicate Advisory: OpenClaw's Node system.run approval hardening wrapper semantic drift can execute unintended local scripts

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-h3rm-6x7g-882f. This link is maintained to preserve external references. Original Description OpenClaw 2026.3.1 contains an approval integrity vulnerability in system.run node-host execution where argv rewriting...

EUVD-2026-13016

OpenClaw 2026.3.1 contains an approval integrity vulnerability in system.run node-host execution where argv rewriting changes command semantics. Attackers can place malicious local scripts in the working directory to execute unintended code despite operator approval of different command text...