VulnerabilityBSI CERT-Bund
OpenClaw: Mehrere Schwachstellen
NEOSEC enrichment — no mirror of the original source
Ein Angreifer kann mehrere Schwachstellen in OpenClaw ausnutzen, um erweiterte Berechtigungen zu erlangen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten offenzulegen oder zu manipulieren, einen Denial-of-Service-Zustand auszulösen oder andere, nicht näher…
Source: BSI CERT-Bund. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at BSI CERT-BundFull advisory
Highbsi:WID-SEC-2026-331675 linked CVEs
Open advisory with all CVEs
More on OpenClaw
Other advisories
- HighCVE-2026-62197OpenClaw: Browser CDP discovery could accept blocked WebSocket URLs
- HighCVE-2026-62197OpenClaw: Browser CDP discovery could accept blocked WebSocket URLs
- MediumCVE-2026-110689OpenClaw ClawScan: Versagen eines Schutzmechanismus
- Not ratedosv:CVE-2026-110689OpenClaw ClawScan Static Scanner runner.go shouldSkipTargetPath protection mechanism
- MediumCVE-2026-110689OpenClaw ClawScan: Versagen eines Schutzmechanismus
- MediumCVE-2026-110689A security flaw has been discovered in OpenClaw ClawScan up to 0.1.6. This impacts the function shouldSkipTargetPath of the file internal/runner/runner.go of…
- HighCVE-2026-108757Das Nexting pinclaw OpenClaw Kanal-Plugin in Version 0.
- HighCVE-2026-108757Nexting pinclaw OpenClaw channel plugin through 0.3.0 contains a missing authentication vulnerability in src/core/http-router.ts that skips the authToken che…
Other news entries
- OpenClaw: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- OpenClaw: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- OpenClaw: Schwachstelle ermöglicht Denial of ServiceVulnerabilityBSI CERT-Bund
- OpenClaw rolls out system-wide overhaul, updates security controls across agent platformNewsCSO Online
- OpenClaw 2.0 pours glitter on slow-burning security dumpster fireNewsThe Register — Security
- Claude Opus 4.6 Bypasses Gym Booking Limit, Cancels Other Users' Reservations in TestsNewsThe Hacker News
- Finding Nemo(Claw): Networking Issue Allows for LLM Poisoning in OpenClawNewsDark Reading
- In Other News: Iran Tracks US Military Phones, CrashStealer macOS Malware, CVD BlueprintNewsSecurityWeek
Source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3316
ID