Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:npm/clawdbot@2026.1.29
purl pkg:npm/clawdbot@2026.1.29
Tags Ghost
This package is not known to be subject of any advisories.
Vulnerabilities fixed by this package (5)

Advisory Summary Aliases
GHSA-r2c6-8jc8-g32w
Duplicate Advisory: 1-Click RCE via Authentication Token Exfiltration From gatewayUrl ### Duplicate Advisory This advisory has been withdrawn because it …
GHSA-q284-4pvr-m585
OpenClaw/Clawdbot has OS Command Injection via Project Root Path in sshNodeCommand Two related vulnerabilities existed in the macOS application's SSH … CVE-2026-25157
GHSA-mc68-q9jw-2h3v
OpenClaw/Clawdbot Docker Execution has Authenticated Command Injection via PATH Environment Variable ### Summary A Command Injection vulnerability existed in Clawdbot’s … CVE-2026-24763
GHSA-g8p2-7wf7-98mq
OpenClaw/Clawdbot has 1-Click RCE via Authentication Token Exfiltration From gatewayUrl ## Summary The Control UI trusts `gatewayUrl` from the query … CVE-2026-25253
CVE-2026-25253
OpenClaw/Clawdbot has 1-Click RCE via Authentication Token Exfiltration From gatewayUrl The Control UI trusts `gatewayUrl` from the query string without … GHSA-g8p2-7wf7-98mq