CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
OpenClaw log poisoning (indirect prompt injection) via WebSocket headers |
| 17/02/2026 |
| GHSA-56f2-hvwg-5743 | HOCH7.6 | OpenClaw affected by SSRF in Image Tool Remote Fetch | 17/02/2026 |
| GHSA-hv93-r4j3-q65f | HOCH7.1 | OpenClaw Hook Session Key Override Enables Targeted Cross-Session Routing | 17/02/2026 |
| CVE-2026-25593 | HOCH8.4 | OpenClaw is a personal AI assistant. Prior to 2026.1.20, an unauthenticated local client could use the Gateway WebSocket API to write config via config.apply and set unsafe cliPath values that were later used for command discovery, enabling command injection as the gateway user. This vulnerability is fixed in 2026.1.20 | 06/02/2026 |
| CVE-2026-25475 | MITTEL6.5 | OpenClaw is a personal AI assistant. Prior to version 2026.1.30, the isValidMedia() function in src/media/parse.ts allows arbitrary file paths including absolute paths, home directory paths, and directory traversal sequences. An agent can read any file on the system by outputting MEDIA:/path/to/file, exfiltrating sensi | 04/02/2026 |