Search for packages
| purl | pkg:npm/clawdbot@2026.1.20-2 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 4.4 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-w2cg-vxx6-5xjg
Aliases: CVE-2026-29612 |
OpenClaw: denial of service through large base64 media files allocating large buffers before limit checks ## Summary Base64-backed media inputs … | There are no reported fixed by versions. |
|
GHSA-r2c6-8jc8-g32w
|
Duplicate Advisory: 1-Click RCE via Authentication Token Exfiltration From gatewayUrl ### Duplicate Advisory This advisory has been withdrawn because it … | There are no reported fixed by versions. |
|
GHSA-rq6g-px6m-c248
Aliases: CVE-2026-28469 |
OpenClaw Google Chat shared-path webhook target ambiguity allowed cross-account policy-context misrouting ## Summary When multiple Google Chat webhook targets are … | There are no reported fixed by versions. |
|
GHSA-mj5r-hh7j-4gxf
Aliases: CVE-2026-28480 |
OpenClaw Telegram allowlist authorization accepted mutable usernames ## Summary Telegram allowlist authorization could match on `@username` (mutable/recyclable) instead of immutable … | There are no reported fixed by versions. |
|
GHSA-chm2-m3w2-wcxm
|
OpenClaw Google Chat spoofing access with allowlist authorized mutable email principal despite sender-ID mismatch ### Summary Google Chat allowlisting supports … | There are no reported fixed by versions. |
|
GHSA-q284-4pvr-m585
Aliases: CVE-2026-25157 |
OpenClaw/Clawdbot has OS Command Injection via Project Root Path in sshNodeCommand Two related vulnerabilities existed in the macOS application's SSH … | There are no reported fixed by versions. |
|
GHSA-mc68-q9jw-2h3v
Aliases: CVE-2026-24763 |
OpenClaw/Clawdbot Docker Execution has Authenticated Command Injection via PATH Environment Variable ### Summary A Command Injection vulnerability existed in Clawdbot’s … | There are no reported fixed by versions. |
|
GHSA-g8p2-7wf7-98mq
Aliases: CVE-2026-25253 |
OpenClaw/Clawdbot has 1-Click RCE via Authentication Token Exfiltration From gatewayUrl ## Summary The Control UI trusts `gatewayUrl` from the query … | There are no reported fixed by versions. |
|
GHSA-g34w-4xqq-h79m
Aliases: CVE-2026-26328 |
OpenClaw iMessage group allowlist authorization inherited DM pairing-store identities ## Summary Under iMessage `groupPolicy=allowlist`, group authorization could be satisfied by … | There are no reported fixed by versions. |
|
GHSA-q447-rj3r-2cgh
Aliases: CVE-2026-28478 |
OpenClaw affected by denial of service via unbounded webhook request body buffering ### Summary Multiple webhook handlers accepted and buffered … | There are no reported fixed by versions. |
|
GHSA-3fqr-4cg8-h96q
Aliases: CVE-2026-26317 |
OpenClaw affected by cross-site request forgery (CSRF) through loopback browser mutation endpoints ## Summary Browser-facing localhost mutation routes accepted cross-origin … | There are no reported fixed by versions. |
|
GHSA-h89v-j3x9-8wqj
Aliases: CVE-2026-28452 |
OpenClaw affected by denial of service through unguarded archive extraction allowing high expansion/resource abuse (ZIP/TAR) ## Summary Archive extraction lacked … | There are no reported fixed by versions. |
|
CVE-2026-25253
Aliases: GHSA-g8p2-7wf7-98mq |
OpenClaw/Clawdbot has 1-Click RCE via Authentication Token Exfiltration From gatewayUrl The Control UI trusts `gatewayUrl` from the query string without … | There are no reported fixed by versions. |