# OpenClaw.

Every CVE that names OpenClaw among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [OpenClaw before 2026.8.1 Path Traversal via Unicode Fallback](https://agentprime.io/advisories/CVE-2026-100533.md)
  `CVE-2026-100533` · CVE record: OpenClaw OpenClaw · CVSS 6.0 Medium · Not analysed yet · Published 26 Sept 2026 · Tags: Path traversal
- [OpenClaw before 2026.8.1 Exec Approval Directory Binding](https://agentprime.io/advisories/CVE-2026-100530.md)
  `CVE-2026-100530` · CVE record: OpenClaw OpenClaw · CVSS 8.5 High · Not analysed yet · Published 26 Sept 2026 · Tags: Broken access control
- [OpenClaw before 2026.8.1 Authorization Scope Widening via File-Transfer](https://agentprime.io/advisories/CVE-2026-100529.md)
  `CVE-2026-100529` · CVE record: OpenClaw OpenClaw · CVSS 7.4 High · Not analysed yet · Published 26 Sept 2026 · Tags: Broken access control
- [OpenClaw before 2026.8.1 Credential Disclosure via Provider Endpoint](https://agentprime.io/advisories/CVE-2026-100528.md)
  `CVE-2026-100528` · CVE record: OpenClaw OpenClaw · CVSS 5.9 Medium · Not analysed yet · Published 26 Sept 2026 · Tags: Information disclosure
- [OpenClaw before 2026.8.2 Denial of Service via Browser Relay](https://agentprime.io/advisories/CVE-2026-100527.md)
  `CVE-2026-100527` · CVE record: OpenClaw OpenClaw · CVSS 6.9 Medium · Not analysed yet · Published 26 Sept 2026 · Tags: Denial of service
- [OpenClaw Canvas Host Route server.ts createCanvasHostHandler denial of service](https://agentprime.io/advisories/CVE-2026-94094.md)
  `CVE-2026-94094` · CVE record: OpenClaw · CVSS 5.3 Medium · Not analysed yet · Published 20 Sept 2026 · Tags: Denial of service
- [OpenClaw < 2026.5.18 Authorization Bypass via Glob Matching](https://agentprime.io/advisories/CVE-2026-62229.md)
  `CVE-2026-62229` · CVE record: OpenClaw OpenClaw · CVSS 7.7 High · Not analysed yet · Published 17 Jul 2026 · Tags: Path traversal
- [OpenClaw < 2026.6.5 Authorization Bypass via Node Exec Approvals](https://agentprime.io/advisories/CVE-2026-62228.md)
  `CVE-2026-62228` · CVE record: OpenClaw OpenClaw · CVSS 7.7 High · Not analysed yet · Published 17 Jul 2026 · Tags: Broken access control
- [OpenClaw 2026.4.14 < 2026.5.26 SSRF via Browser Snapshot](https://agentprime.io/advisories/CVE-2026-62227.md)
  `CVE-2026-62227` · CVE record: OpenClaw OpenClaw · CVSS 4.9 Medium · Not analysed yet · Published 17 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [OpenClaw 2026.3.28 < 2026.5.19 Authorization Bypass via Browser Act Route](https://agentprime.io/advisories/CVE-2026-62226.md)
  `CVE-2026-62226` · CVE record: OpenClaw OpenClaw · CVSS 5.1 Medium · Not analysed yet · Published 17 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [OpenClaw < 2026.5.18 Authorization Bypass via Skill Command Dispatch](https://agentprime.io/advisories/CVE-2026-62225.md)
  `CVE-2026-62225` · CVE record: OpenClaw OpenClaw · CVSS 2.3 Low · Not analysed yet · Published 17 Jul 2026 · Tags: Broken access control
- [OpenClaw < 2026.5.18 Authorization Bypass via Device-pair](https://agentprime.io/advisories/CVE-2026-62223.md)
  `CVE-2026-62223` · CVE record: OpenClaw OpenClaw · CVSS 7.7 High · Not analysed yet · Published 17 Jul 2026 · Tags: Broken access control
- [OpenClaw < 2026.5.22 Untrusted Plugin Loading via Setup-mode](https://agentprime.io/advisories/CVE-2026-62222.md)
  `CVE-2026-62222` · CVE record: OpenClaw OpenClaw · CVSS 7.1 High · Not analysed yet · Published 17 Jul 2026 · Tags: CWE-829
- [OpenClaw 2026.5.12 < 2026.5.26 Authorization Bypass via allowFrom](https://agentprime.io/advisories/CVE-2026-62221.md)
  `CVE-2026-62221` · CVE record: OpenClaw OpenClaw · CVSS 2.3 Low · Not analysed yet · Published 17 Jul 2026 · Tags: Broken access control
- [OpenClaw 2026.2.25 < 2026.5.26 WebSocket Rate Limit Bypass](https://agentprime.io/advisories/CVE-2026-62220.md)
  `CVE-2026-62220` · CVE record: OpenClaw OpenClaw · CVSS 6.3 Medium · Not analysed yet · Published 17 Jul 2026 · Tags: Authentication bypass
- [OpenClaw 2026.2.12 < 2026.5.26 Authorization Bypass via Blank Agent IDs](https://agentprime.io/advisories/CVE-2026-62219.md)
  `CVE-2026-62219` · CVE record: OpenClaw OpenClaw · CVSS 6.0 Medium · Not analysed yet · Published 17 Jul 2026 · Tags: Broken access control
- [OpenClaw 2026.1.20 < 2026.5.27 Authorization Bypass via device.pair.approve](https://agentprime.io/advisories/CVE-2026-62218.md)
  `CVE-2026-62218` · CVE record: OpenClaw OpenClaw · CVSS 8.7 High · Not analysed yet · Published 17 Jul 2026 · Tags: Broken access control
- [OpenClaw 2026.5.14-beta.1 < 2026.5.27 Authentication Bypass via exec approvals](https://agentprime.io/advisories/CVE-2026-62217.md)
  `CVE-2026-62217` · CVE record: OpenClaw OpenClaw · CVSS 7.7 High · Not analysed yet · Published 17 Jul 2026 · Tags: Broken access control
- [OpenClaw 2026.4.20 < 2026.5.28 Policy Bypass via Media Upload](https://agentprime.io/advisories/CVE-2026-62216.md)
  `CVE-2026-62216` · CVE record: OpenClaw OpenClaw · CVSS 2.3 Low · Not analysed yet · Published 17 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [OpenClaw < 2026.6.5 Authentication Bypass via HTTP Canvas](https://agentprime.io/advisories/CVE-2026-62215.md)
  `CVE-2026-62215` · CVE record: OpenClaw OpenClaw · CVSS 5.1 Medium · Not analysed yet · Published 17 Jul 2026 · Tags: CWE-345
- [OpenClaw < 2026.5.28 Authentication Bypass via safeFetch](https://agentprime.io/advisories/CVE-2026-62212.md)
  `CVE-2026-62212` · CVE record: OpenClaw OpenClaw · CVSS 5.1 Medium · Not analysed yet · Published 17 Jul 2026 · Tags: Race condition
- [OpenClaw < 2026.6.1 Credential Redaction Bypass via Trajectory Export](https://agentprime.io/advisories/CVE-2026-62211.md)
  `CVE-2026-62211` · CVE record: OpenClaw OpenClaw · CVSS 4.1 Medium · Not analysed yet · Published 17 Jul 2026 · Tags: Information disclosure
- [OpenClaw < 2026.6.1 Denial of Service via Remote Media URLs](https://agentprime.io/advisories/CVE-2026-62210.md)
  `CVE-2026-62210` · CVE record: OpenClaw OpenClaw · CVSS 6.0 Medium · Not analysed yet · Published 17 Jul 2026 · Tags: Denial of service
- [OpenClaw 2026.5.10-beta.1 < 2026.6.5 Authorization Bypass via agent-mode dispatch](https://agentprime.io/advisories/CVE-2026-62209.md)
  `CVE-2026-62209` · CVE record: OpenClaw OpenClaw · CVSS 7.6 High · Not analysed yet · Published 17 Jul 2026 · Tags: Broken access control
- [OpenClaw < 2026.6.5 Authentication Bypass via Admin Tools](https://agentprime.io/advisories/CVE-2026-62207.md)
  `CVE-2026-62207` · CVE record: OpenClaw OpenClaw · CVSS 7.7 High · Not analysed yet · Published 17 Jul 2026 · Tags: Broken access control
- [OpenClaw < 2026.6.9 Authentication Bypass via Moderation Actions](https://agentprime.io/advisories/CVE-2026-62206.md)
  `CVE-2026-62206` · CVE record: OpenClaw OpenClaw · CVSS 6.0 Medium · Not analysed yet · Published 17 Jul 2026 · Tags: Broken access control
- [OpenClaw 2026.4.12-beta.1 < 2026.6.6 Authorization Bypass via message actions](https://agentprime.io/advisories/CVE-2026-62205.md)
  `CVE-2026-62205` · CVE record: OpenClaw OpenClaw · CVSS 6.0 Medium · Not analysed yet · Published 17 Jul 2026 · Tags: Broken access control
- [OpenClaw < 2026.6.6 Environment Variable Injection via rustup](https://agentprime.io/advisories/CVE-2026-62203.md)
  `CVE-2026-62203` · CVE record: OpenClaw OpenClaw · CVSS 7.7 High · Not analysed yet · Published 17 Jul 2026 · Tags: CWE-184
- [OpenClaw 2026.6.1 < 2026.6.9 Privilege Escalation via Cron](https://agentprime.io/advisories/CVE-2026-62202.md)
  `CVE-2026-62202` · CVE record: OpenClaw OpenClaw · CVSS 7.7 High · Not analysed yet · Published 17 Jul 2026 · Tags: Broken access control
- [OpenClaw < 2026.6.6 Network Policy Bypass via exec-server](https://agentprime.io/advisories/CVE-2026-62201.md)
  `CVE-2026-62201` · CVE record: OpenClaw OpenClaw · CVSS 4.9 Medium · Not analysed yet · Published 17 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [OpenClaw < 2026.6.6 Authentication Bypass via Git ext transport](https://agentprime.io/advisories/CVE-2026-62200.md)
  `CVE-2026-62200` · CVE record: OpenClaw OpenClaw · CVSS 8.7 High · Not analysed yet · Published 13 Jul 2026 · Tags: CWE-184
- [OpenClaw < 2026.6.6 Authentication Bypass via Environment Filtering](https://agentprime.io/advisories/CVE-2026-62199.md)
  `CVE-2026-62199` · CVE record: OpenClaw OpenClaw · CVSS 8.7 High · Not analysed yet · Published 13 Jul 2026 · Tags: CWE-184
- [OpenClaw 2026.5.28 < 2026.6.6 Authorization Bypass via Web Search](https://agentprime.io/advisories/CVE-2026-62198.md)
  `CVE-2026-62198` · CVE record: OpenClaw OpenClaw · CVSS 5.3 Medium · Not analysed yet · Published 13 Jul 2026 · Tags: Broken access control
- [OpenClaw 2026.3.22 < 2026.6.6 Authorization Bypass via WhatsApp Group IDs](https://agentprime.io/advisories/CVE-2026-62196.md)
  `CVE-2026-62196` · CVE record: OpenClaw OpenClaw · CVSS 8.7 High · Not analysed yet · Published 13 Jul 2026 · Tags: Broken access control
- [OpenClaw 2026.5.20 < 2026.6.6 Authorization Bypass via MCP loopback](https://agentprime.io/advisories/CVE-2026-62195.md)
  `CVE-2026-62195` · CVE record: OpenClaw OpenClaw · CVSS 8.7 High · Not analysed yet · Published 13 Jul 2026 · Tags: Broken access control
- [OpenClaw 2026.5.20 < 2026.6.9 Privilege Escalation via Plugin Install](https://agentprime.io/advisories/CVE-2026-62194.md)
  `CVE-2026-62194` · CVE record: OpenClaw OpenClaw · CVSS 8.7 High · Not analysed yet · Published 13 Jul 2026 · Tags: Broken access control
- [OpenClaw 2026.6.5 < 2026.6.9 Authentication Bypass via Plugin Install](https://agentprime.io/advisories/CVE-2026-62193.md)
  `CVE-2026-62193` · CVE record: OpenClaw OpenClaw · CVSS 6.9 Medium · Not analysed yet · Published 13 Jul 2026 · Tags: Broken access control
- [OpenClaw 2026.6.6 < 2026.6.9 Authorization Bypass](https://agentprime.io/advisories/CVE-2026-62192.md)
  `CVE-2026-62192` · CVE record: OpenClaw OpenClaw · CVSS 7.2 High · Not analysed yet · Published 13 Jul 2026 · Tags: Broken access control
- [OpenClaw 2026.6.6 < 2026.6.9 Authorization Bypass via Message Mutations](https://agentprime.io/advisories/CVE-2026-62191.md)
  `CVE-2026-62191` · CVE record: OpenClaw OpenClaw · CVSS 7.1 High · Not analysed yet · Published 13 Jul 2026 · Tags: Broken access control
- [OpenClaw < 2026.6.9 Authorization Bypass via flock wrapper](https://agentprime.io/advisories/CVE-2026-62190.md)
  `CVE-2026-62190` · CVE record: OpenClaw OpenClaw · CVSS 8.7 High · Not analysed yet · Published 13 Jul 2026 · Tags: Broken access control, CWE-706
- [OpenClaw < 2026.6.9 Symlink Following via Mirror Sync](https://agentprime.io/advisories/CVE-2026-62189.md)
  `CVE-2026-62189` · CVE record: OpenClaw OpenClaw · CVSS 7.6 High · Not analysed yet · Published 13 Jul 2026 · Tags: Path traversal, Race condition
- [OpenClaw < 2026.6.8 Authorization Bypass via HTTP Model Override](https://agentprime.io/advisories/CVE-2026-62186.md)
  `CVE-2026-62186` · CVE record: OpenClaw OpenClaw · CVSS 7.2 High · Not analysed yet · Published 13 Jul 2026 · Tags: Broken access control
- [OpenClaw < 2026.5.28 - Credential Override via Workspace Dotenv Files](https://agentprime.io/advisories/CVE-2026-59261.md)
  `CVE-2026-59261` · CVE record: OpenClaw OpenClaw · CVSS 8.4 High · Not analysed yet · Published 8 Jul 2026 · Tags: CWE-184
- [OpenClaw bluebubbles Webhook monitor.ts handleBlueBubblesWebhookRequest improper authentication](https://agentprime.io/advisories/CVE-2026-8305.md)
  `CVE-2026-8305` · CVE record: OpenClaw · CVSS 6.9 Medium · Not analysed yet · Published 11 May 2026 · Tags: Authentication bypass
- [OpenClaw < 2026.4.15 - Authorization Bypass in Matrix Room Control Commands via DM Pairing Store](https://agentprime.io/advisories/CVE-2026-44110.md)
  `CVE-2026-44110` · CVE record: OpenClaw OpenClaw · CVSS 7.7 High · Not analysed yet · Published 6 May 2026 · Tags: Broken access control
- [OpenClaw 2026.1.5 < 2026.2.12 - Missing Authentication in Browser Control HTTP Endpoints](https://agentprime.io/advisories/CVE-2026-28485.md)
  `CVE-2026-28485` · CVE record: OpenClaw OpenClaw · CVSS 7.5 High · Not analysed yet · Published 5 Mar 2026 · Tags: Authentication bypass

Newest: <https://agentprime.io/advisories/technology/openclaw.md>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=openclaw&cursor=WyIyMDI2LTA5LTI2VDAyOjE4OjM0LjQ3NzAwMFoiLCJDVkUtMjAyNi0xMDA1MzQiXQ>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/openclaw/?cursor=WyIyMDI2LTA5LTI2VDAyOjE4OjM0LjQ3NzAwMFoiLCJDVkUtMjAyNi0xMDA1MzQiXQ>. Everything for agents: <https://agentprime.io/llms.txt>.