Advisories · Technology

OpenClaw.

Every CVE that names OpenClaw among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-102807 CVE record

CVSS 6.0 Medium

OpenClaw before 2026.9.4 Authorization Bypass via MCP App Standalone Ticket
- OpenClaw
- Broken access control
Not analysed yet 29 Sept 2026
CVE-2026-102806 CVE record

CVSS 6.0 Medium

OpenClaw before 2026.9.5 Sandbox Isolation Bypass via Media Pipelines
- OpenClaw
- Broken access control
Not analysed yet 29 Sept 2026
CVE-2026-100599 CVE record

CVSS 8.7 High

OpenClaw 2026.5.1 before 2026.7.1 Remote Code Execution via googlemeet.chrome
- OpenClaw
- Command injection
Not analysed yet 26 Sept 2026
CVE-2026-100598 CVE record

CVSS 7.5 High

OpenClaw before 2026.7.1 Approval Binding Logic Error
- OpenClaw
- CWE-346
Not analysed yet 26 Sept 2026
CVE-2026-100597 CVE record

CVSS 8.8 High

OpenClaw before 2026.7.1 Path Traversal via Filesystem Race
- OpenClaw
- Race condition
Not analysed yet 26 Sept 2026
CVE-2026-100596 CVE record

CVSS 8.7 High

OpenClaw before 2026.7.1 Authorization Bypass via MCP Configuration
- OpenClaw
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100595 CVE record

CVSS 7.1 High

OpenClaw before 2026.7.1 Authorization Bypass via diagnostics
- OpenClaw
- Information disclosure
Not analysed yet 26 Sept 2026
CVE-2026-100594 CVE record

CVSS 7.1 High

OpenClaw before 2026.7.1 Authorization Bypass via trajectory export
- OpenClaw
- Information disclosure
Not analysed yet 26 Sept 2026
CVE-2026-100593 CVE record

CVSS 5.3 Medium

OpenClaw before 2026.7.1 Authentication Bypass via activation
- OpenClaw
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100592 CVE record

CVSS 5.3 Medium

OpenClaw before 2026.7.1 Authentication Bypass via Memory Dreaming
- OpenClaw
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100591 CVE record

CVSS 5.3 Medium

OpenClaw before 2026.7.1 Authentication Bypass via Active Memory
- OpenClaw
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100590 CVE record

CVSS 5.3 Medium

OpenClaw before 2026.7.1 Authorization Bypass via voice set
- OpenClaw
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100589 CVE record

CVSS 8.7 High

OpenClaw before 2026.7.1 Sandbox Bypass via Browser Node
- OpenClaw
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100588 CVE record

CVSS 8.7 High

OpenClaw before 2026.7.1 Authentication Bypass via node.invoke
- OpenClaw
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100587 CVE record

CVSS 8.7 High

OpenClaw before 2026.7.1 Authorization Bypass via Codex Install
- OpenClaw
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100586 CVE record

CVSS 8.7 High

OpenClaw Codex before 2026.7.1 Authorization Bypass via Bind
- OpenClaw
- Privilege escalation
Not analysed yet 26 Sept 2026
CVE-2026-100585 CVE record

CVSS 8.6 High

OpenClaw before 2026.7.1 Authentication Bypass via MCP Channel
- OpenClaw
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100584 CVE record

CVSS 5.4 Medium

OpenClaw before 2026.7.1 Allowlist Bypass via Workspace Shadows
- OpenClaw
- CWE-426
Not analysed yet 26 Sept 2026
CVE-2026-100581 CVE record

CVSS 6.8 Medium

OpenClaw iOS before 2026.8.11 Credential Storage via Share Extension
- OpenClaw
- Information disclosure
Not analysed yet 26 Sept 2026
CVE-2026-100580 CVE record

CVSS 8.7 High

OpenClaw before 2026.7.1 Remote Code Execution via cron tool
- OpenClaw
- CWE-178
Not analysed yet 26 Sept 2026
CVE-2026-100579 CVE record

CVSS 7.2 High

OpenClaw before 2026.7.1 Authentication Bypass via Spoofed Requester
- OpenClaw
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100578 CVE record

CVSS 7.2 High

OpenClaw before 2026.7.1 Authorization Bypass via chat.send
- OpenClaw
- Privilege escalation
Not analysed yet 26 Sept 2026
CVE-2026-100577 CVE record

CVSS 5.3 Medium

OpenClaw before 2026.8.1 Server-Side Request Forgery via Video Asset
- OpenClaw
- Server-side request forgery (SSRF)
Not analysed yet 26 Sept 2026
CVE-2026-100576 CVE record

CVSS 5.3 Medium

OpenClaw before 2026.8.1 SSRF via Browser Wait Predicates
- OpenClaw
- Server-side request forgery (SSRF)
Not analysed yet 26 Sept 2026
CVE-2026-100574 CVE record

CVSS 8.2 High

OpenClaw before 2026.8.1 SSRF via Trusted-Host DNS
- OpenClaw
- Server-side request forgery (SSRF)
Not analysed yet 26 Sept 2026
CVE-2026-100573 CVE record

CVSS 4.8 Medium

OpenClaw before 2026.8.1 Sandbox Policy Bypass via MCP Loopback
- OpenClaw
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100572 CVE record

CVSS 6.9 Medium

OpenClaw before 2026.8.1 Denial of Service via Rate Limit
- OpenClaw
- Denial of service
Not analysed yet 26 Sept 2026
CVE-2026-100571 CVE record

CVSS 6.9 Medium

OpenClaw before 2026.8.1 SMS Webhook Rate Limit Bypass
- OpenClaw
- Denial of service
Not analysed yet 26 Sept 2026
CVE-2026-100570 CVE record

CVSS 8.5 High

OpenClaw before 2026.8.1 Remote Code Execution via CLOUDSDK_PYTHON_ARGS
- OpenClaw
- Command injection
Not analysed yet 26 Sept 2026
CVE-2026-100569 CVE record

CVSS 6.8 Medium

OpenClaw before 2026.8.1 Credential Exposure via Endpoint Override
- OpenClaw
- Hard-coded credentials
Not analysed yet 26 Sept 2026
CVE-2026-100568 CVE record

CVSS 8.7 High

OpenClaw before 2026.8.1 Unauthorized Command Job Access
- OpenClaw
- Information disclosure
Not analysed yet 26 Sept 2026
CVE-2026-100567 CVE record

CVSS 8.9 High

OpenClaw before 2026.8.1 DNS Rebinding via CDP Hostname
- OpenClaw
- Server-side request forgery (SSRF)
Not analysed yet 26 Sept 2026
CVE-2026-100564 CVE record

CVSS 5.3 Medium

OpenClaw before 2026.8.1 CSV Formula Injection via Attendance Export
- OpenClaw
- Other injection
Not analysed yet 26 Sept 2026
CVE-2026-100563 CVE record

CVSS 5.3 Medium

OpenClaw before 2026.8.1 CSV Formula Injection via Session Labels
- OpenClaw
- Other injection
Not analysed yet 26 Sept 2026
CVE-2026-100562 CVE record

CVSS 5.3 Medium

OpenClaw before 2026.8.1 Authorization Bypass via sessions.create
- OpenClaw
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100561 CVE record

CVSS 8.6 High

OpenClaw before 2026.8.1 Authentication Bypass via Exec Wrapper
- OpenClaw
- Command injection
Not analysed yet 26 Sept 2026
CVE-2026-100560 CVE record

CVSS 7.7 High

OpenClaw before 2026.8.1 Reusable Exec Approvals Authorization Bypass
- OpenClaw
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100559 CVE record

CVSS 8.6 High

OpenClaw before 2026.8.1 Command Injection via Escaped Newlines
- OpenClaw
- Command injection
Not analysed yet 26 Sept 2026
CVE-2026-100558 CVE record

CVSS 8.7 High

OpenClaw before 2026.8.1 Resource Exhaustion via WebSocket Upgrade
- OpenClaw
- Denial of service
Not analysed yet 26 Sept 2026
CVE-2026-100557 CVE record

CVSS 8.7 High

OpenClaw before 2026.8.1 Authorization Bypass via Skill Tool Dispatch
- OpenClaw
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100556 CVE record

CVSS 5.3 Medium

OpenClaw before 2026.8.1 Authentication Bypass via Session Reset
- OpenClaw
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100555 CVE record

CVSS 7.1 High

OpenClaw before 2026.8.1 DNS Rebinding via attachment delivery
- OpenClaw
- Server-side request forgery (SSRF)
Not analysed yet 26 Sept 2026
CVE-2026-100554 CVE record

CVSS 2.3 Low

OpenClaw before 2026.8.1 Canvas Capability Revocation Bypass
- OpenClaw
- Authentication bypass
Not analysed yet 26 Sept 2026
CVE-2026-100553 CVE record

CVSS 5.3 Medium

OpenClaw 2026.6.9 before 2026.8.1 Cross-Context Policy Bypass via Feishu unpin
- OpenClaw
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100552 CVE record

CVSS 8.7 High

OpenClaw before 2026.8.1 Policy Bypass via Native Tools
- OpenClaw
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100551 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

OpenClaw iOS Control UI TLS Pin Enforcement Bypass
- OpenClaw
- Weak cryptography or TLS
Not analysed yet 26 Sept 2026
CVE-2026-100550 CVE record

CVSS 5.3 Medium

OpenClaw before 2026.8.1 Authentication Bypass via Access Group
- OpenClaw
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100549 CVE record

CVSS 5.3 Medium

OpenClaw before 2026.8.1 Path Traversal via QQBot voice filenames
- OpenClaw
- Path traversal
Not analysed yet 26 Sept 2026
CVE-2026-100548 CVE record

CVSS 6.0 Medium

OpenClaw before 2026.8.1 Credential Exposure via Embedding Fallback
- OpenClaw
- Information disclosure
Not analysed yet 26 Sept 2026
CVE-2026-100547 CVE record

CVSS 6.8 Medium

OpenClaw before 2026.8.1 Authentication Bypass via File URL
- OpenClaw
- CWE-180
Not analysed yet 26 Sept 2026
CVE-2026-100546 CVE record

CVSS 6.1 Medium

OpenClaw 2026.7.2 before 2026.9.2 Authentication Bypass via Voice Transcript
- OpenClaw
- Race condition
Not analysed yet 26 Sept 2026
CVE-2026-100545 CVE record

CVSS 6.0 Medium

OpenClaw before 2026.8.1 Policy Bypass via Session Filename Generation
- OpenClaw
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100543 CVE record

CVSS 7.7 High

OpenClaw before 2026.8.1 Information Disclosure via Configuration Hash
- OpenClaw
- Information disclosure
Not analysed yet 26 Sept 2026
CVE-2026-100542 CVE record

CVSS 2.3 Low

OpenClaw before 2026.8.1 Extraction Limit Bypass via tar.bz2
- OpenClaw
- Denial of service
Not analysed yet 26 Sept 2026
CVE-2026-100539 CVE record

CVSS 2.1 Low

OpenClaw before 2026.8.1 Memory Access Control Bypass
- OpenClaw
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100538 CVE record

CVSS 7.1 High

OpenClaw before 2026.8.1 Local File Read via Outbound Attachments
- OpenClaw
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100537 CVE record

CVSS 2.3 Low

OpenClaw before 2026.8.1 Authentication Bypass via Active Memory
- OpenClaw
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100536 CVE record

CVSS 7.1 High

OpenClaw before 2026.8.1 Path Traversal via Structured Attachments
- OpenClaw
- Path traversal
Not analysed yet 26 Sept 2026
CVE-2026-100535 CVE record

CVSS 7.7 High

OpenClaw before 2026.8.1 Privilege Escalation via Session Memory
- OpenClaw
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100534 CVE record

CVSS 2.3 Low

OpenClaw before 2026.8.1 Session Cancellation Authorization Bypass
- OpenClaw
- Broken access control
Not analysed yet 26 Sept 2026