VulnerabilityBSI CERT-Bund
OpenClaw: Schwachstelle ermöglicht Denial of Service
NEOSEC enrichment — no mirror of the original source
Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in OpenClaw ausnutzen, um einen Denial of Service Angriff durchzuführen.
Source: BSI CERT-Bund. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at BSI CERT-BundFull advisory
Mediumbsi:WID-SEC-2026-34781 linked CVE
Open advisory with all CVEs
More on OpenClaw
Other advisories
- HighCVE-2026-62197OpenClaw: Browser CDP discovery could accept blocked WebSocket URLs
- HighCVE-2026-62197OpenClaw: Browser CDP discovery could accept blocked WebSocket URLs
- MediumCVE-2026-110689OpenClaw ClawScan: Versagen eines Schutzmechanismus
- Not ratedosv:CVE-2026-110689OpenClaw ClawScan Static Scanner runner.go shouldSkipTargetPath protection mechanism
- MediumCVE-2026-110689OpenClaw ClawScan: Versagen eines Schutzmechanismus
- MediumCVE-2026-110689A security flaw has been discovered in OpenClaw ClawScan up to 0.1.6. This impacts the function shouldSkipTargetPath of the file internal/runner/runner.go of…
- HighCVE-2026-108757Das Nexting pinclaw OpenClaw Kanal-Plugin in Version 0.
- HighCVE-2026-108757Nexting pinclaw OpenClaw channel plugin through 0.3.0 contains a missing authentication vulnerability in src/core/http-router.ts that skips the authToken che…
Other news entries
- OpenClaw: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- OpenClaw: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- OpenClaw: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- OpenClaw rolls out system-wide overhaul, updates security controls across agent platformNewsCSO Online
- OpenClaw 2.0 pours glitter on slow-burning security dumpster fireNewsThe Register — Security
- Claude Opus 4.6 Bypasses Gym Booking Limit, Cancels Other Users' Reservations in TestsNewsThe Hacker News
- Finding Nemo(Claw): Networking Issue Allows for LLM Poisoning in OpenClawNewsDark Reading
- In Other News: Iran Tracks US Military Phones, CrashStealer macOS Malware, CVD BlueprintNewsSecurityWeek
Source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3478
ID