CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 05/03/2026 |
| CVE-2026-28448 | CRITICAL9.4 | OpenClaw versions 2026.1.29 prior to 2026.2.1 contain a vulnerability in the Twitch plugin (must be installed and enabled) in which it fails to enforce the allowFrom allowlist when allowedRoles is unset or empty, allowing unauthorized Twitch users to trigger agent dispatch. Remote attackers can mention the bot in Twitc | 05/03/2026 |
| CVE-2026-28447 | MEDIUM6.5 | OpenClaw versions 2026.1.29-beta.1 prior to 2026.2.1 contain a path traversal vulnerability in plugin installation that allows malicious plugin package names to escape the extensions directory. Attackers can craft scoped package names containing path traversal sequences like .. to write files outside the intended insta | 05/03/2026 |
| CVE-2026-28446 | CRITICAL9.8 | OpenClaw versions prior to 2026.2.1 with the voice-call extension installed and enabled contain an authentication bypass vulnerability in inbound allowlist policy validation that accepts empty caller IDs and uses suffix-based matching instead of strict equality. Remote attackers can bypass inbound access controls by pl | 05/03/2026 |
| CVE-2026-28395 | CRITICAL9.1 | OpenClaw version 2026.1.14-1 prior to 2026.2.12 contains an improper network binding vulnerability in the Chrome extension (must be installed and enabled) relay server that treats wildcard hosts as loopback addresses, allowing the relay HTTP/WS server to bind to all interfaces when a wildcard cdpUrl is configured. Remo | 05/03/2026 |
| CVE-2026-28394 | MEDIUM6.5 | OpenClaw versions prior to 2026.2.15 contain a denial of service vulnerability in the web_fetch tool that allows attackers to crash the Gateway process through memory exhaustion by parsing oversized or deeply nested HTML responses. Remote attackers can social-engineer users into fetching malicious URLs with pathologica | 05/03/2026 |
| CVE-2026-28393 | CRITICAL9.8 | OpenClaw versions 2.0.0-beta3 prior to 2026.2.14 contain a path traversal vulnerability in hook transform module loading that allows arbitrary JavaScript execution. The hooks.mappings[].transform.module parameter accepts absolute paths and traversal sequences, enabling attackers with configuration write access to load | 05/03/2026 |
| CVE-2026-28392 | CRITICAL9.8 | OpenClaw versions prior to 2026.2.14 contain a privilege escalation vulnerability in the Slack slash-command handler that incorrectly authorizes any direct message sender when dmPolicy is set to open (must be configured). Attackers can execute privileged slash commands via direct message to bypass allowlist and access- | 05/03/2026 |
| CVE-2026-28391 | CRITICAL9.8 | OpenClaw versions prior to 2026.2.2 fail to properly validate Windows cmd.exe metacharacters in allowlist-gated exec requests (non-default configuration), allowing attackers to bypass command approval restrictions. Remote attackers can craft command strings with shell metacharacters like & or %...% to execute unapprove | 05/03/2026 |
| GHSA-jjgj-cpp9-cvpv | MEDIUM | OpenClaw Vulnerable to Local File Exfiltration via MCP Tool Result MEDIA: Directive Injection | 04/03/2026 |
| GHSA-3jx4-q2m7-r496 | HIGH | OpenClaw: Hardlink alias checks could bypass workspace-only file boundaries in specific configurations | 04/03/2026 |
| GHSA-9mph-4f7v-fmvh | MEDIUM | OpenClaw has agent avatar symlink traversal in gateway session metadata | 04/03/2026 |
| GHSA-f6h3-846h-2r8w | MEDIUM | OpenClaw's elevated allowFrom accepted broader identity signals than specified within sender-scoped authorization | 04/03/2026 |
| GHSA-8cp7-rp8r-mg77 | MEDIUM | OpenClaw has SSRF guard bypass via IPv6 transition over ISATAP | 04/03/2026 |
| GHSA-2ch6-x3g4-7759 | HIGH | OpenClaw's commands.allowFrom sender authorization accepted conversation identifiers via ctx.From | 03/03/2026 |
| GHSA-534w-2vm4-89xr | MEDIUM | OpenClaw's Zalo group sender allowlist bypass permits unauthorized GROUP dispatch | 03/03/2026 |
| GHSA-cjv3-m589-v3rx | MEDIUM | OpenClaw has Canvas route hardening for mixed-trust deployments | 03/03/2026 |
| GHSA-jxrq-8fm4-9p58 | HIGH | OpenClaw: Zip extraction symlink traversal could write outside destination | 03/03/2026 |