Product by Open Source

    Openclaw

    129 known vulnerabilities in Openclaw (Open Source), 0 of them actively exploited (CISA KEV).

    Key figures

    129

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Openclaw (Open Source)
    HighCVE-2026-62229

    OpenClaw < 2026.5.18 Authorization Bypass via Glob Matching

    also in 1 other product

    		8.8
    HighCVE-2026-100560

    OpenClaw before 2026.8.1 Reusable Exec Approvals Authorization Bypass

    also in 1 other product

    		7.5
    HighCVE-2026-62207

    OpenClaw < 2026.6.5 Authentication Bypass via Admin Tools

    also in 1 other product

    		8.8
    HighCVE-2026-62202

    OpenClaw 2026.6.1 < 2026.6.9 Privilege Escalation via Cron

    also in 1 other product

    		8.8
    HighCVE-2026-62203

    OpenClaw < 2026.6.6 Environment Variable Injection via rustup

    also in 1 other product

    		8.8
    HighCVE-2026-62200

    OpenClaw < 2026.6.6 Authentication Bypass via Git ext transport

    also in 1 other product

    		8.8
    HighCVE-2026-62199

    OpenClaw < 2026.6.6 Authentication Bypass via Environment Filtering

    also in 1 other product

    		8.8
    HighCVE-2026-62190

    OpenClaw < 2026.6.9 Authorization Bypass via flock wrapper

    also in 1 other product

    		8.8
    HighCVE-2026-100580

    OpenClaw before 2026.7.1 Remote Code Execution via cron tool

    also in 1 other product

    		8.8
    HighCVE-2026-62223

    OpenClaw < 2026.5.18 Authorization Bypass via Device-pair

    also in 1 other product

    		8.8
    HighCVE-2026-62228

    OpenClaw < 2026.6.5 Authorization Bypass via Node Exec Approvals

    also in 1 other product

    		8.8
    HighCVE-2026-62218

    OpenClaw 2026.1.20 < 2026.5.27 Authorization Bypass via device.pair.approve

    also in 1 other product

    		8.8
    HighCVE-2026-62217

    OpenClaw 2026.5.14-beta.1 < 2026.5.27 Authentication Bypass via exec approvals

    also in 1 other product

    		8.8
    HighCVE-2026-62194

    OpenClaw 2026.5.20 < 2026.6.9 Privilege Escalation via Plugin Install

    also in 1 other product

    		8.8
    HighCVE-2026-100589

    OpenClaw before 2026.7.1 Sandbox Bypass via Browser Node

    also in 1 other product

    		8.3
    HighCVE-2026-100599

    OpenClaw 2026.5.1 before 2026.7.1 Remote Code Execution via googlemeet.chrome

    also in 1 other product

    		8.8
    HighCVE-2026-53836

    OpenClaw < 2026.5.12 - Allowlist Bypass via PowerShell Encoded-Command Aliases

    also in 1 other product

    		8.8
    HighCVE-2026-100588

    OpenClaw before 2026.7.1 Authentication Bypass via node.invoke

    also in 1 other product

    		8.3
    HighCVE-2026-100567

    OpenClaw before 2026.8.1 DNS Rebinding via CDP Hostname

    also in 1 other product

    		8.2
    HighCVE-2026-100558

    OpenClaw before 2026.8.1 Resource Exhaustion via WebSocket Upgrade

    also in 1 other product

    		7.5
    HighCVE-2026-100536

    OpenClaw before 2026.8.1 Path Traversal via Structured Attachments

    also in 1 other product

    		6.5
    HighCVE-2026-100575

    OpenClaw Slack before 2026.8.1 Authentication Bypass via Group DM

    also in 1 other product

    		8.8
    HighCVE-2026-100552

    OpenClaw before 2026.8.1 Policy Bypass via Native Tools

    also in 1 other product

    		8.8
    HighCVE-2026-62195

    OpenClaw 2026.5.20 < 2026.6.6 Authorization Bypass via MCP loopback

    also in 1 other product

    		8.3
    HighCVE-2026-62196

    OpenClaw 2026.3.22 < 2026.6.6 Authorization Bypass via WhatsApp Group IDs

    also in 1 other product

    		8.3

    All vulnerabilities in search

    All products by Open Source