# OpenClaw. Every CVE that names OpenClaw among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first - [OpenClaw before 2026.9.4 Authorization Bypass via MCP App Standalone Ticket](https://agentprime.io/advisories/CVE-2026-102807.md) `CVE-2026-102807` · CVE record: OpenClaw OpenClaw · CVSS 6.0 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: Broken access control - [OpenClaw before 2026.9.5 Sandbox Isolation Bypass via Media Pipelines](https://agentprime.io/advisories/CVE-2026-102806.md) `CVE-2026-102806` · CVE record: OpenClaw OpenClaw · CVSS 6.0 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: Broken access control - [OpenClaw 2026.5.1 before 2026.7.1 Remote Code Execution via googlemeet.chrome](https://agentprime.io/advisories/CVE-2026-100599.md) `CVE-2026-100599` · CVE record: OpenClaw OpenClaw · CVSS 8.7 High · Not analysed yet · Published 26 Sept 2026 · Tags: Command injection - [OpenClaw before 2026.7.1 Approval Binding Logic Error](https://agentprime.io/advisories/CVE-2026-100598.md) `CVE-2026-100598` · CVE record: OpenClaw OpenClaw · CVSS 7.5 High · Not analysed yet · Published 26 Sept 2026 · Tags: CWE-346 - [OpenClaw before 2026.7.1 Path Traversal via Filesystem Race](https://agentprime.io/advisories/CVE-2026-100597.md) `CVE-2026-100597` · CVE record: OpenClaw OpenClaw · CVSS 8.8 High · Not analysed yet · Published 26 Sept 2026 · Tags: Race condition - [OpenClaw before 2026.7.1 Authorization Bypass via MCP Configuration](https://agentprime.io/advisories/CVE-2026-100596.md) `CVE-2026-100596` · CVE record: OpenClaw OpenClaw · CVSS 8.7 High · Not analysed yet · Published 26 Sept 2026 · Tags: Broken access control - [OpenClaw before 2026.7.1 Authorization Bypass via diagnostics](https://agentprime.io/advisories/CVE-2026-100595.md) `CVE-2026-100595` · CVE record: OpenClaw OpenClaw · CVSS 7.1 High · Not analysed yet · Published 26 Sept 2026 · Tags: Information disclosure - [OpenClaw before 2026.7.1 Authorization Bypass via trajectory export](https://agentprime.io/advisories/CVE-2026-100594.md) `CVE-2026-100594` · CVE record: OpenClaw OpenClaw · CVSS 7.1 High · Not analysed yet · Published 26 Sept 2026 · Tags: Information disclosure - [OpenClaw before 2026.7.1 Authentication Bypass via activation](https://agentprime.io/advisories/CVE-2026-100593.md) `CVE-2026-100593` · CVE record: OpenClaw OpenClaw · CVSS 5.3 Medium · Not analysed yet · Published 26 Sept 2026 · Tags: Broken access control - [OpenClaw before 2026.7.1 Authentication Bypass via Memory Dreaming](https://agentprime.io/advisories/CVE-2026-100592.md) `CVE-2026-100592` · CVE record: OpenClaw OpenClaw · CVSS 5.3 Medium · Not analysed yet · Published 26 Sept 2026 · Tags: Broken access control - [OpenClaw before 2026.7.1 Authentication Bypass via Active Memory](https://agentprime.io/advisories/CVE-2026-100591.md) `CVE-2026-100591` · CVE record: OpenClaw OpenClaw · CVSS 5.3 Medium · Not analysed yet · Published 26 Sept 2026 · Tags: Broken access control - [OpenClaw before 2026.7.1 Authorization Bypass via voice set](https://agentprime.io/advisories/CVE-2026-100590.md) `CVE-2026-100590` · CVE record: OpenClaw OpenClaw · CVSS 5.3 Medium · Not analysed yet · Published 26 Sept 2026 · Tags: Broken access control - [OpenClaw before 2026.7.1 Sandbox Bypass via Browser Node](https://agentprime.io/advisories/CVE-2026-100589.md) `CVE-2026-100589` · CVE record: OpenClaw OpenClaw · CVSS 8.7 High · Not analysed yet · Published 26 Sept 2026 · Tags: Broken access control - [OpenClaw before 2026.7.1 Authentication Bypass via node.invoke](https://agentprime.io/advisories/CVE-2026-100588.md) `CVE-2026-100588` · CVE record: OpenClaw OpenClaw · CVSS 8.7 High · Not analysed yet · Published 26 Sept 2026 · Tags: Broken access control - [OpenClaw before 2026.7.1 Authorization Bypass via Codex Install](https://agentprime.io/advisories/CVE-2026-100587.md) `CVE-2026-100587` · CVE record: OpenClaw OpenClaw · CVSS 8.7 High · Not analysed yet · Published 26 Sept 2026 · Tags: Broken access control - [OpenClaw Codex before 2026.7.1 Authorization Bypass via Bind](https://agentprime.io/advisories/CVE-2026-100586.md) `CVE-2026-100586` · CVE record: OpenClaw OpenClaw · CVSS 8.7 High · Not analysed yet · Published 26 Sept 2026 · Tags: Privilege escalation - [OpenClaw before 2026.7.1 Authentication Bypass via MCP Channel](https://agentprime.io/advisories/CVE-2026-100585.md) `CVE-2026-100585` · CVE record: OpenClaw OpenClaw · CVSS 8.6 High · Not analysed yet · Published 26 Sept 2026 · Tags: Broken access control - [OpenClaw before 2026.7.1 Allowlist Bypass via Workspace Shadows](https://agentprime.io/advisories/CVE-2026-100584.md) `CVE-2026-100584` · CVE record: OpenClaw OpenClaw · CVSS 5.4 Medium · Not analysed yet · Published 26 Sept 2026 · Tags: CWE-426 - [OpenClaw iOS before 2026.8.11 Credential Storage via Share Extension](https://agentprime.io/advisories/CVE-2026-100581.md) `CVE-2026-100581` · CVE record: OpenClaw OpenClaw · CVSS 6.8 Medium · Not analysed yet · Published 26 Sept 2026 · Tags: Information disclosure - [OpenClaw before 2026.7.1 Remote Code Execution via cron tool](https://agentprime.io/advisories/CVE-2026-100580.md) `CVE-2026-100580` · CVE record: OpenClaw OpenClaw · CVSS 8.7 High · Not analysed yet · Published 26 Sept 2026 · Tags: CWE-178 - [OpenClaw before 2026.7.1 Authentication Bypass via Spoofed Requester](https://agentprime.io/advisories/CVE-2026-100579.md) `CVE-2026-100579` · CVE record: OpenClaw OpenClaw · CVSS 7.2 High · Not analysed yet · Published 26 Sept 2026 · Tags: Broken access control - [OpenClaw before 2026.7.1 Authorization Bypass via chat.send](https://agentprime.io/advisories/CVE-2026-100578.md) `CVE-2026-100578` · CVE record: OpenClaw OpenClaw · CVSS 7.2 High · Not analysed yet · Published 26 Sept 2026 · Tags: Privilege escalation - [OpenClaw before 2026.8.1 Server-Side Request Forgery via Video Asset](https://agentprime.io/advisories/CVE-2026-100577.md) `CVE-2026-100577` · CVE record: OpenClaw OpenClaw · CVSS 5.3 Medium · Not analysed yet · Published 26 Sept 2026 · Tags: Server-side request forgery (SSRF) - [OpenClaw before 2026.8.1 SSRF via Browser Wait Predicates](https://agentprime.io/advisories/CVE-2026-100576.md) `CVE-2026-100576` · CVE record: OpenClaw OpenClaw · CVSS 5.3 Medium · Not analysed yet · Published 26 Sept 2026 · Tags: Server-side request forgery (SSRF) - [OpenClaw before 2026.8.1 SSRF via Trusted-Host DNS](https://agentprime.io/advisories/CVE-2026-100574.md) `CVE-2026-100574` · CVE record: OpenClaw OpenClaw · CVSS 8.2 High · Not analysed yet · Published 26 Sept 2026 · Tags: Server-side request forgery (SSRF) - [OpenClaw before 2026.8.1 Sandbox Policy Bypass via MCP Loopback](https://agentprime.io/advisories/CVE-2026-100573.md) `CVE-2026-100573` · CVE record: OpenClaw OpenClaw · CVSS 4.8 Medium · Not analysed yet · Published 26 Sept 2026 · Tags: Broken access control - [OpenClaw before 2026.8.1 Denial of Service via Rate Limit](https://agentprime.io/advisories/CVE-2026-100572.md) `CVE-2026-100572` · CVE record: OpenClaw OpenClaw · CVSS 6.9 Medium · Not analysed yet · Published 26 Sept 2026 · Tags: Denial of service - [OpenClaw before 2026.8.1 SMS Webhook Rate Limit Bypass](https://agentprime.io/advisories/CVE-2026-100571.md) `CVE-2026-100571` · CVE record: OpenClaw OpenClaw · CVSS 6.9 Medium · Not analysed yet · Published 26 Sept 2026 · Tags: Denial of service - [OpenClaw before 2026.8.1 Remote Code Execution via CLOUDSDK_PYTHON_ARGS](https://agentprime.io/advisories/CVE-2026-100570.md) `CVE-2026-100570` · CVE record: OpenClaw OpenClaw · CVSS 8.5 High · Not analysed yet · Published 26 Sept 2026 · Tags: Command injection - [OpenClaw before 2026.8.1 Credential Exposure via Endpoint Override](https://agentprime.io/advisories/CVE-2026-100569.md) `CVE-2026-100569` · CVE record: OpenClaw OpenClaw · CVSS 6.8 Medium · Not analysed yet · Published 26 Sept 2026 · Tags: Hard-coded credentials - [OpenClaw before 2026.8.1 Unauthorized Command Job Access](https://agentprime.io/advisories/CVE-2026-100568.md) `CVE-2026-100568` · CVE record: OpenClaw OpenClaw · CVSS 8.7 High · Not analysed yet · Published 26 Sept 2026 · Tags: Information disclosure - [OpenClaw before 2026.8.1 DNS Rebinding via CDP Hostname](https://agentprime.io/advisories/CVE-2026-100567.md) `CVE-2026-100567` · CVE record: OpenClaw OpenClaw · CVSS 8.9 High · Not analysed yet · Published 26 Sept 2026 · Tags: Server-side request forgery (SSRF) - [OpenClaw before 2026.8.1 CSV Formula Injection via Attendance Export](https://agentprime.io/advisories/CVE-2026-100564.md) `CVE-2026-100564` · CVE record: OpenClaw OpenClaw · CVSS 5.3 Medium · Not analysed yet · Published 26 Sept 2026 · Tags: Other injection - [OpenClaw before 2026.8.1 CSV Formula Injection via Session Labels](https://agentprime.io/advisories/CVE-2026-100563.md) `CVE-2026-100563` · CVE record: OpenClaw OpenClaw · CVSS 5.3 Medium · Not analysed yet · Published 26 Sept 2026 · Tags: Other injection - [OpenClaw before 2026.8.1 Authorization Bypass via sessions.create](https://agentprime.io/advisories/CVE-2026-100562.md) `CVE-2026-100562` · CVE record: OpenClaw OpenClaw · CVSS 5.3 Medium · Not analysed yet · Published 26 Sept 2026 · Tags: Broken access control - [OpenClaw before 2026.8.1 Authentication Bypass via Exec Wrapper](https://agentprime.io/advisories/CVE-2026-100561.md) `CVE-2026-100561` · CVE record: OpenClaw OpenClaw · CVSS 8.6 High · Not analysed yet · Published 26 Sept 2026 · Tags: Command injection - [OpenClaw before 2026.8.1 Reusable Exec Approvals Authorization Bypass](https://agentprime.io/advisories/CVE-2026-100560.md) `CVE-2026-100560` · CVE record: OpenClaw OpenClaw · CVSS 7.7 High · Not analysed yet · Published 26 Sept 2026 · Tags: Broken access control - [OpenClaw before 2026.8.1 Command Injection via Escaped Newlines](https://agentprime.io/advisories/CVE-2026-100559.md) `CVE-2026-100559` · CVE record: OpenClaw OpenClaw · CVSS 8.6 High · Not analysed yet · Published 26 Sept 2026 · Tags: Command injection - [OpenClaw before 2026.8.1 Resource Exhaustion via WebSocket Upgrade](https://agentprime.io/advisories/CVE-2026-100558.md) `CVE-2026-100558` · CVE record: OpenClaw OpenClaw · CVSS 8.7 High · Not analysed yet · Published 26 Sept 2026 · Tags: Denial of service - [OpenClaw before 2026.8.1 Authorization Bypass via Skill Tool Dispatch](https://agentprime.io/advisories/CVE-2026-100557.md) `CVE-2026-100557` · CVE record: OpenClaw OpenClaw · CVSS 8.7 High · Not analysed yet · Published 26 Sept 2026 · Tags: Broken access control - [OpenClaw before 2026.8.1 Authentication Bypass via Session Reset](https://agentprime.io/advisories/CVE-2026-100556.md) `CVE-2026-100556` · CVE record: OpenClaw OpenClaw · CVSS 5.3 Medium · Not analysed yet · Published 26 Sept 2026 · Tags: Broken access control - [OpenClaw before 2026.8.1 DNS Rebinding via attachment delivery](https://agentprime.io/advisories/CVE-2026-100555.md) `CVE-2026-100555` · CVE record: OpenClaw OpenClaw · CVSS 7.1 High · Not analysed yet · Published 26 Sept 2026 · Tags: Server-side request forgery (SSRF) - [OpenClaw before 2026.8.1 Canvas Capability Revocation Bypass](https://agentprime.io/advisories/CVE-2026-100554.md) `CVE-2026-100554` · CVE record: OpenClaw OpenClaw · CVSS 2.3 Low · Not analysed yet · Published 26 Sept 2026 · Tags: Authentication bypass - [OpenClaw 2026.6.9 before 2026.8.1 Cross-Context Policy Bypass via Feishu unpin](https://agentprime.io/advisories/CVE-2026-100553.md) `CVE-2026-100553` · CVE record: OpenClaw OpenClaw · CVSS 5.3 Medium · Not analysed yet · Published 26 Sept 2026 · Tags: Broken access control - [OpenClaw before 2026.8.1 Policy Bypass via Native Tools](https://agentprime.io/advisories/CVE-2026-100552.md) `CVE-2026-100552` · CVE record: OpenClaw OpenClaw · CVSS 8.7 High · Not analysed yet · Published 26 Sept 2026 · Tags: Broken access control - [OpenClaw iOS Control UI TLS Pin Enforcement Bypass](https://agentprime.io/advisories/CVE-2026-100551.md) `CVE-2026-100551` · CVE record: OpenClaw OpenClaw · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Sept 2026 · Tags: Weak cryptography or TLS - [OpenClaw before 2026.8.1 Authentication Bypass via Access Group](https://agentprime.io/advisories/CVE-2026-100550.md) `CVE-2026-100550` · CVE record: OpenClaw OpenClaw · CVSS 5.3 Medium · Not analysed yet · Published 26 Sept 2026 · Tags: Broken access control - [OpenClaw before 2026.8.1 Path Traversal via QQBot voice filenames](https://agentprime.io/advisories/CVE-2026-100549.md) `CVE-2026-100549` · CVE record: OpenClaw OpenClaw · CVSS 5.3 Medium · Not analysed yet · Published 26 Sept 2026 · Tags: Path traversal - [OpenClaw before 2026.8.1 Credential Exposure via Embedding Fallback](https://agentprime.io/advisories/CVE-2026-100548.md) `CVE-2026-100548` · CVE record: OpenClaw OpenClaw · CVSS 6.0 Medium · Not analysed yet · Published 26 Sept 2026 · Tags: Information disclosure - [OpenClaw before 2026.8.1 Authentication Bypass via File URL](https://agentprime.io/advisories/CVE-2026-100547.md) `CVE-2026-100547` · CVE record: OpenClaw OpenClaw · CVSS 6.8 Medium · Not analysed yet · Published 26 Sept 2026 · Tags: CWE-180 - [OpenClaw 2026.7.2 before 2026.9.2 Authentication Bypass via Voice Transcript](https://agentprime.io/advisories/CVE-2026-100546.md) `CVE-2026-100546` · CVE record: OpenClaw OpenClaw · CVSS 6.1 Medium · Not analysed yet · Published 26 Sept 2026 · Tags: Race condition - [OpenClaw before 2026.8.1 Policy Bypass via Session Filename Generation](https://agentprime.io/advisories/CVE-2026-100545.md) `CVE-2026-100545` · CVE record: OpenClaw OpenClaw · CVSS 6.0 Medium · Not analysed yet · Published 26 Sept 2026 · Tags: Broken access control - [OpenClaw before 2026.8.1 Information Disclosure via Configuration Hash](https://agentprime.io/advisories/CVE-2026-100543.md) `CVE-2026-100543` · CVE record: OpenClaw OpenClaw · CVSS 7.7 High · Not analysed yet · Published 26 Sept 2026 · Tags: Information disclosure - [OpenClaw before 2026.8.1 Extraction Limit Bypass via tar.bz2](https://agentprime.io/advisories/CVE-2026-100542.md) `CVE-2026-100542` · CVE record: OpenClaw OpenClaw · CVSS 2.3 Low · Not analysed yet · Published 26 Sept 2026 · Tags: Denial of service - [OpenClaw before 2026.8.1 Memory Access Control Bypass](https://agentprime.io/advisories/CVE-2026-100539.md) `CVE-2026-100539` · CVE record: OpenClaw OpenClaw · CVSS 2.1 Low · Not analysed yet · Published 26 Sept 2026 · Tags: Broken access control - [OpenClaw before 2026.8.1 Local File Read via Outbound Attachments](https://agentprime.io/advisories/CVE-2026-100538.md) `CVE-2026-100538` · CVE record: OpenClaw OpenClaw · CVSS 7.1 High · Not analysed yet · Published 26 Sept 2026 · Tags: Broken access control - [OpenClaw before 2026.8.1 Authentication Bypass via Active Memory](https://agentprime.io/advisories/CVE-2026-100537.md) `CVE-2026-100537` · CVE record: OpenClaw OpenClaw · CVSS 2.3 Low · Not analysed yet · Published 26 Sept 2026 · Tags: Broken access control - [OpenClaw before 2026.8.1 Path Traversal via Structured Attachments](https://agentprime.io/advisories/CVE-2026-100536.md) `CVE-2026-100536` · CVE record: OpenClaw OpenClaw · CVSS 7.1 High · Not analysed yet · Published 26 Sept 2026 · Tags: Path traversal - [OpenClaw before 2026.8.1 Privilege Escalation via Session Memory](https://agentprime.io/advisories/CVE-2026-100535.md) `CVE-2026-100535` · CVE record: OpenClaw OpenClaw · CVSS 7.7 High · Not analysed yet · Published 26 Sept 2026 · Tags: Broken access control - [OpenClaw before 2026.8.1 Session Cancellation Authorization Bypass](https://agentprime.io/advisories/CVE-2026-100534.md) `CVE-2026-100534` · CVE record: OpenClaw OpenClaw · CVSS 2.3 Low · Not analysed yet · Published 26 Sept 2026 · Tags: Broken access control Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .