CVE-2026-100562

OpenClaw versions prior to 2026.8.1 are vulnerable to an authorization bypass in the sessions.create endpoint. This flaw allows callers with operator.write credentials to modify session configurations restricted to the operator.admin scope. Affected parameters include the session model, provider,...

CVE-2026-100561

The OpenClaw (npm package 'openclaw' ) versions >= 2026.3.22 and

CVE-2026-100560

Versions of OpenClaw before 2026.8.1 on macOS and Linux are vulnerable to an authorization bypass due to how

CVE-2026-100559

Versions of OpenClaw prior to 2026.8.1 are vulnerable to a command parser vulnerability . The root cause is that escaped newlines confuse the exec allowlist parsing logic. An attacker can craft malicious input using these escaped newlines to bypass allowlist validation, leading to the execution o...

CVE-2026-100558

OpenClaw versions prior to 2026.8.1 are susceptible to a resource exhaustion vulnerability within the Gateway listener . This flaw allows unauthenticated clients to retain response sockets by submitting WebSocket upgrade requests that do not align with expected connection semantics. By repeatedly...

CVE-2026-100557

Versions of OpenClaw prior to 2026.8.1 are vulnerable to an authorization bypass within the skill tool dispatch. The root cause is a failure to propagate the sender's owner status, which allows non-owner users authorized to invoke skill commands to access owner-only tools and server credentials r...

CVE-2026-100556

The OpenClaw npm package (versions >= 2026.5.2 and < 2026.8.1 ) contains an incorrect authorization vulnerability within WhatsApp group handling. An attacker who is permitted to send ordinary messages but restricted from using owner commands can exploit this by issuing the /new command. Th...

CVE-2026-100555

The OpenClaw npm-distributed gateway application (versions >= 2026.7.1 and

CVE-2026-100554

The OpenClaw (npm package 'openclaw') versions >= 2026.5.12 and

CVE-2026-100553

OpenClaw versions >= 2026.6.9 and

CVE-2026-100552

The OpenClaw (npm package 'openclaw' ) before version 2026.8.1 fails to correctly enforce per-chat tool policies for Codex app-server runtime tools . While conversation-level tools.allow rules successfully filter OpenClaw tools, they do not restrict the shell , process , file , and patch tools ow...

CVE-2026-100551

OpenClaw for iOS versions >= 2026.7.1 and

CVE-2026-100550

The OpenClaw npm package (openclaw) prior to version 2026.8.1 is vulnerable to an access-control bypass within its Microsoft Teams integration . When groupPolicy is configured to use an allowlist, a missing or unsupported access group generates a denied group-resolution result. Because this resul...

CVE-2026-100549

OpenClaw versions before 2026.8.1 are vulnerable to a path traversal vulnerability within the QQBot voice attachment handling component. The root cause is that filenames are decoded twice , which allows encoded traversal segments to reappear after the initial sanitization process. An attacker can...

CVE-2026-100548

The OpenClaw npm package (openclaw ) versions >= 2026.3.28 and

CVE-2026-100547

The OpenClaw coding agent (npm package openclaw) versions 2026.7.1 through 2026.7.2 are vulnerable to a local file disclosure flaw. The root cause is that alternate but valid file: URL spellings supplied over the Agent Client Protocol (ACP) are incorrectly treated as relative paths and classified...

CVE-2026-100546

The OpenClaw npm package (openclaw) versions >= 2026.7.2 and

CVE-2026-100544

The @openclaw/voice-call package (prior to version 2026.8.1 ) contains an authorization bypass vulnerability. The root cause is the failure to propagate the caller's identity or non-owner status when launching the configured agent for classic inbound voice calls. This allows a remote caller admit...

CVE-2026-100545

The OpenClaw (npm package openclaw) before version 2026.8.1 contains a vulnerability where it incorrectly enforces sender tool policies during session-memory filename generation . In affected versions, the generation process creates an embedded helper that retains tools even if the originating se...

CVE-2026-100543

The OpenClaw npm package (version openclaw before 2026.8.1 ) is vulnerable to information disclosure because it includes deterministic hashes computed over original, unredacted configurations within redacted configuration responses. If the Gateway password has low entropy and other configuration ...