Search for packages
| purl | pkg:npm/openclaw@2026.4.24-beta.2 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 4.4 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-rjxq-qqhf-8hwh
Aliases: CVE-2026-53840 |
OpenClaw: MCP Streamable HTTP redirects could forward configured custom headers to another origin ### Summary OpenClaw supports remote MCP Streamable … |
Vulnerable |
|
GHSA-q86m-697p-h7fh
|
Duplicate Advisory: OpenClaw: system.run approvals did not bind PATH-token executable identity, enabling post-approval executable rebind ## Duplicate Advisory This advisory … | There are no reported fixed by versions. |
|
GHSA-44c9-4rg5-qjgq
|
Duplicate Advisory: web_search citation redirect SSRF via private-network-allowing policy ## Duplicate Advisory This advisory has been withdrawn because it is … | There are no reported fixed by versions. |
|
GHSA-wr92-6w3g-2hwc
|
Duplicate Advisory: OpenClaw's sandboxed sessions_spawn now enforces sandbox inheritance for cross-agent spawns ## Duplicate Advisory This advisory has been withdrawn … | There are no reported fixed by versions. |
|
GHSA-72fw-cqh5-f324
Aliases: CVE-2026-53844 |
OpenClaw: memory-wiki shared search could miss session visibility checks ### Summary memory-wiki shared search could miss session visibility checks. In … |
Vulnerable |
|
GHSA-24vr-rprv-67rf
Aliases: CVE-2026-53846 |
OpenClaw: Workspace .env npm_execpath could influence bundled runtime dependency install ### Summary Workspace .env npm_execpath could influence bundled runtime dependency … |
Vulnerable |
|
GHSA-c8w7-9w9h-x69q
|
Duplicate Advisory: Slack reaction events could ignore reaction notification settings ## Duplicate Advisory This advisory has been withdrawn because it … | There are no reported fixed by versions. |
|
GHSA-fcvx-5cxc-v5p8
Aliases: CVE-2026-53851 |
OpenClaw: Slack reaction events could ignore reaction notification settings ### Summary Slack reaction events could ignore reaction notification settings. In … |
Vulnerable |
|
GHSA-58wc-8wrv-xp9j
|
Duplicate Advisory: Active Memory write scope could mutate global config ## Duplicate Advisory This advisory has been withdrawn because it … | There are no reported fixed by versions. |
|
GHSA-wc84-j36w-pw4x
Aliases: CVE-2026-53858 |
OpenClaw: Workspace .env STATE_DIRECTORY could influence bundled runtime dependency roots ### Summary Workspace .env STATE_DIRECTORY could influence bundled runtime dependency … |
Vulnerable |
|
GHSA-c226-q6fx-6j6c
Aliases: CVE-2026-53861 |
OpenClaw: macOS Swift exec allowlist missed combined POSIX inline flags ### Summary macOS Swift exec allowlist missed combined POSIX inline … |
Vulnerable |
|
GHSA-vqx6-6j84-2794
|
Duplicate Advisory: Hostname checks could treat trailing-dot hosts inconsistently ## Duplicate Advisory This advisory has been withdrawn because it is … | There are no reported fixed by versions. |
|
GHSA-gxg4-2rrr-jhc7
Aliases: CVE-2026-53859 |
OpenClaw: Hostname checks could treat trailing-dot hosts inconsistently ### Summary Hostname checks could treat trailing-dot hosts inconsistently. In affected versions, … |
Vulnerable |
|
GHSA-w9hf-3pp7-pvxv
Aliases: CVE-2026-53841 |
OpenClaw: Exported session HTML could keep unsafe markdown links ### Summary Exported session HTML could keep unsafe markdown links. In … |
Vulnerable |
|
GHSA-wrr6-p5r6-474m
|
Duplicate Advisory: Exec allowlist could miss side effects from transparent command wrappers ## Duplicate Advisory This advisory has been withdrawn … | There are no reported fixed by versions. |
|
GHSA-g796-jqmx-wf9q
|
Duplicate Advisory: macOS Swift exec allowlist missed combined POSIX inline flags ## Duplicate Advisory This advisory has been withdrawn because … | There are no reported fixed by versions. |
|
GHSA-p44v-rx83-vjp4
|
Duplicate Advisory: Discord allowFrom could bind to mutable display names ## Duplicate Advisory This advisory has been withdrawn because it … | There are no reported fixed by versions. |
|
GHSA-ccwh-wwpp-6wg5
Aliases: CVE-2026-53864 |
OpenClaw: Host environment sanitizer missed two Node.js control variables ### Summary Host environment sanitizer missed two Node.js control variables. In … |
Vulnerable |
|
GHSA-8wmm-344f-mpjg
|
Duplicate Advisory: Tool group policy callers could accept unvalidated group IDs ## Duplicate Advisory This advisory has been withdrawn because … | There are no reported fixed by versions. |
|
GHSA-cwpp-5962-q4f6
Aliases: CVE-2026-53848 |
OpenClaw: Exec allowlist could miss side effects from transparent command wrappers ### Summary Exec allowlist could miss side effects from … |
Vulnerable |
|
GHSA-hc4w-hm59-9w88
|
Duplicate Advisory: Empty-scope device re-pairing could confuse caller scope containment ## Duplicate Advisory This advisory has been withdrawn because it … | There are no reported fixed by versions. |
|
GHSA-9v8j-9c9g-w66c
Aliases: CVE-2026-53862 |
OpenClaw: Bootstrap token replay could widen pending pairing scopes ### Summary Bootstrap token replay could widen pending pairing scopes. In … |
Vulnerable |
|
GHSA-4hpg-mp64-x7xq
Aliases: CVE-2026-53854 |
OpenClaw: Internal/webchat command auth could inherit ownerAllowFrom wildcard state ### Summary Internal/webchat command auth could inherit ownerAllowFrom wildcard state. In … |
Vulnerable |
|
GHSA-v383-2wgg-v483
|
Duplicate Advisory: Shell inline-command parsing could miss an allowlist check ## Duplicate Advisory This advisory has been withdrawn because it … | There are no reported fixed by versions. |
|
GHSA-x629-46cc-7xgw
Aliases: CVE-2026-53847 |
OpenClaw: Active Memory write scope could mutate global config ### Summary Active Memory write scope could mutate global config. In … |
Vulnerable |
|
GHSA-985f-72mj-8gf7
Aliases: CVE-2026-53863 |
OpenClaw: Tool group policy callers could accept unvalidated group IDs ### Summary Tool group policy callers could accept unvalidated group … |
Vulnerable |
|
GHSA-68xw-r643-9p5w
Aliases: CVE-2026-53845 |
OpenClaw: Skill-command dispatch could skip before-tool-call hooks ### Summary Skill-command dispatch could skip before-tool-call hooks. In affected versions, a skill … |
Vulnerable |
|
GHSA-8mg9-j9cf-54cj
Aliases: CVE-2026-53852 |
OpenClaw: Empty-scope device re-pairing could confuse caller scope containment ### Summary Empty-scope device re-pairing could confuse caller scope containment. In … |
Vulnerable |
|
GHSA-gw2c-6hcg-5g52
|
Duplicate Advisory: Focus command could miss controlScope enforcement ## Duplicate Advisory This advisory has been withdrawn because it is a … | There are no reported fixed by versions. |
|
GHSA-cw4q-gqg5-g38h
Aliases: CVE-2026-53849 |
OpenClaw: Discord allowFrom could bind to mutable display names ### Summary Discord allowFrom could bind to mutable display names. In … |
Vulnerable |
|
GHSA-h9h6-pwqv-j9hv
|
Duplicate Advisory: Bootstrap token replay could widen pending pairing scopes ## Duplicate Advisory This advisory has been withdrawn because it … | There are no reported fixed by versions. |
|
GHSA-8j37-5w68-wj2g
Aliases: CVE-2026-53860 |
OpenClaw: BlueBubbles sender policy could match mutable conversation identifiers ### Summary BlueBubbles sender policy could match mutable conversation identifiers. In … |
Vulnerable |
|
GHSA-6xcg-6q43-rj2v
|
Duplicate Advisory: Exported session HTML could keep unsafe markdown links ## Duplicate Advisory This advisory has been withdrawn because it … | There are no reported fixed by versions. |
|
GHSA-mpc8-jxjh-qpgh
Aliases: CVE-2026-53850 |
OpenClaw: Focus command could miss controlScope enforcement ### Summary Focus command could miss controlScope enforcement. In affected versions, a caller … |
Vulnerable |
|
GHSA-r7vv-6763-m739
|
Duplicate Advisory: Skill-command dispatch could skip before-tool-call hooks ## Duplicate Advisory This advisory has been withdrawn because it is a … | There are no reported fixed by versions. |
|
GHSA-rx78-29qr-5hq8
Aliases: CVE-2026-53865 |
OpenClaw: Workspace-derived service PATH could influence trash command selection ### Summary Workspace-derived service PATH could influence trash command selection. In … |
Vulnerable |
|
GHSA-q99w-vh6v-q3v7
Aliases: CVE-2026-53843 |
OpenClaw: Pairing-scoped device session could restore revoked node token authority ### Summary In affected releases, a surviving pairing-scoped session for … |
Vulnerable |
|
GHSA-f397-5vjw-v2c2
Aliases: CVE-2026-53866 |
OpenClaw: Shell inline-command parsing could miss an allowlist check ### Summary Shell inline-command parsing could miss an allowlist check. In … |
Vulnerable |
|
GHSA-fq9j-vw4w-fr6v
Aliases: CVE-2026-53842 |
OpenClaw: Workspace .env CLOUDSDK_PYTHON could influence Gmail setup gcloud execution ### Summary Workspace .env CLOUDSDK_PYTHON could influence Gmail setup gcloud … |
Vulnerable |
|
GHSA-vr6h-vxqj-3pjx
|
Duplicate Advisory: Host environment sanitizer missed two Node.js control variables ## Duplicate Advisory This advisory has been withdrawn because it … | There are no reported fixed by versions. |
|
GHSA-8c59-hr4w-qg69
Aliases: CVE-2026-53857 |
OpenClaw: Zalo allowFrom could bind to mutable display names ### Summary Zalo allowFrom could bind to mutable display names. In … |
Vulnerable |
|
GHSA-r2fx-hp6p-pgrm
|
Duplicate Advisory: Internal/webchat command auth could inherit ownerAllowFrom wildcard state ## Duplicate Advisory This advisory has been withdrawn because it … | There are no reported fixed by versions. |
|
GHSA-8hj2-w4c9-fjfq
|
Duplicate Advisory: BlueBubbles sender policy could match mutable conversation identifiers ## Duplicate Advisory This advisory has been withdrawn because it … | There are no reported fixed by versions. |
|
GHSA-w7m7-3xcf-mp48
|
Duplicate Advisory: Zalo allowFrom could bind to mutable display names ## Duplicate Advisory This advisory has been withdrawn because it … | There are no reported fixed by versions. |
|
GHSA-v2ww-5rh7-2h5v
Aliases: CVE-2026-53853 |
OpenClaw: Linux and macOS exec allowlists skipped configured argument patterns ### Summary OpenClaw's exec allowlist supported optional `argPattern` entries to … |
Vulnerable |
|
GHSA-9c3v-684m-579c
|
OpenClaw MCP SSE redirects could forward Authorization headers ### Summary MCP SSE redirects could forward Authorization headers. In affected versions, … |
Vulnerable |
|
GHSA-v6r2-jh58-xx6w
Aliases: CVE-2026-53810 |
OpenClaw's marketplace runtime extension metadata could point at unscanned payloads ### Summary Marketplace runtime extension metadata could point at unscanned … |
Vulnerable |
|
GHSA-2hfg-4fh4-qp7f
Aliases: CVE-2026-53812 |
OpenClaw's browser act interactions could bypass private-network navigation checks ### Summary OpenClaw's browser control SSRF checks blocked direct navigation to … |
Vulnerable |
|
GHSA-2j8v-hwgc-x698
|
OpenClaw: Shell wrapper argv could change between approval and execution ### Summary Shell wrapper argv could change between approval and … |
Vulnerable |
|
GHSA-p2fh-f5fc-44hr
|
OpenClaw: memory-wiki ingest could read local files with operator.write scope ### Summary memory-wiki ingest could read local files with operator.write … |
Vulnerable |
|
GHSA-hw9r-h9mr-4jff
|
OpenClaw: Scoped chat.send route inheritance could bypass admin command scope gates ### Summary Some internal command handlers require `operator.approvals` or … |
Vulnerable |
|
GHSA-chr9-m4q2-76hw
Aliases: CVE-2026-53817 |
OpenClaw: Control UI locality spoofing could mint a durable admin device token ### Summary In affected LAN/shared-token Control UI deployments, … |
Vulnerable |
|
GHSA-qh2f-99mv-mrcf
|
OpenClaw: Bundle MCP loopback could miss its exec denylist on session spawn ### Summary Bundle MCP loopback could miss its … |
Vulnerable |
|
GHSA-q7q8-3mgw-q67r
Aliases: CVE-2026-53815 |
OpenClaw: Message read actions could skip channel allowlist checks ### Summary Message read actions could skip channel allowlist checks. In … |
Vulnerable |
|
GHSA-wv26-j37q-2g7p
|
OpenClaw's Slack plugin approvals used the exec approver gate for plugin actions ### Summary Slack plugin approvals used the exec … |
Vulnerable |
|
GHSA-6fvr-66p3-3qj4
Aliases: CVE-2026-53814 |
OpenClaw: Hook-triggered CLI runs could receive owner MCP tool authority ### Summary OpenClaw hook ingress can start automated agent runs … |
Vulnerable |
|
GHSA-xww8-gqvh-92x9
|
OpenClaw: Exec approval display truncation could hide the command being approved ### Summary OpenClaw exec approvals could show a shortened … |
Vulnerable |
|
GHSA-hx4v-668p-g2qr
|
Duplicate Advisory: OpenClaw: QQBot native approval buttons did not enforce configured approver identity ### Duplicate Advisory This advisory has been … |
Vulnerable |
|
GHSA-c29c-2q9c-pc86
|
OpenClaw: Slack allowFrom could bind to mutable display names ### Summary Slack allowFrom could bind to mutable display names. In … |
Vulnerable |
|
GHSA-grc3-2j34-p6gm
|
OpenClaw: message.action forwarding could send Gateway credentials to model-supplied loopback URLs ### Summary message.action forwarding could send Gateway credentials to … |
Vulnerable |
|
GHSA-p39j-x9h5-q66m
Aliases: CVE-2026-53809 |
OpenClaw: Embedded runner policy could be confused by provider aliases ### Summary Embedded runner policy could be confused by provider … |
Vulnerable |
|
GHSA-mgq6-vr84-7m2j
Aliases: CVE-2026-35630 |
OpenClaw: QQBot native approval buttons did not enforce configured approver identity ### Summary OpenClaw's QQBot channel can deliver native approval … |
Vulnerable Vulnerable |
|
GHSA-w4v6-g3wm-w36c
|
OpenClaw: QQBot admin commands could skip DM-only and allowFrom policy ### Summary QQBot admin commands could skip DM-only and allowFrom … |
Vulnerable |
|
GHSA-3c6j-hq33-3jv4
Aliases: CVE-2026-53816 |
OpenClaw: Paired nodes could forge exec lifecycle events without system.run provenance ### Summary OpenClaw nodes send lifecycle events back to … |
Vulnerable |
|
GHSA-cqwv-9qjx-vxw2
|
OpenClaw: Skill Workshop apply flow could override pending approval ### Summary Skill Workshop apply flow could override pending approval. In … |
Vulnerable |
|
GHSA-w5ww-7chg-mxcq
|
OpenClaw: Telegram interactive callbacks could skip commands.allowFrom ### Summary Telegram interactive callbacks could skip commands.allowFrom. In affected versions, a Telegram … |
Vulnerable |
|
GHSA-77q5-rr5v-x43q
|
OpenClaw: Trusted retry endpoint checks could match hostname prefixes ### Summary Trusted retry endpoint checks could match hostname prefixes. In … |
Vulnerable |
|
GHSA-hcm3-8f6r-6xwg
|
OpenClaw: Browser debug/export routes could reuse already-open blocked tabs ### Summary Browser debug/export routes could reuse already-open blocked tabs. In … |
Vulnerable |
|
GHSA-6c4r-g249-wv3c
|
OpenClaw: Sandboxed session spawn could expose the real workspace path to child prompts ### Summary Sandboxed session spawn could expose … |
Vulnerable |
|
GHSA-8wg3-5mcm-fjq8
Aliases: CVE-2026-53819 |
OpenClaw: Workspace .env could override Homebrew executable selection for skill install flows ### Summary Workspace .env could override Homebrew executable … |
Vulnerable |
|
GHSA-v8cx-933x-r976
Aliases: CVE-2026-53813 |
OpenClaw: Fake package roots could influence memory-core artifact loading ### Summary Fake package roots could influence memory-core artifact loading. In … |
Vulnerable |
|
GHSA-7hxm-f538-3xp6
Aliases: CVE-2026-53811 |
OpenClaw: Matrix allowFrom could bind to mutable display names ### Summary Matrix allowFrom could bind to mutable display names. In … |
Vulnerable |
|
GHSA-rj6p-xmxr-qj4h
Aliases: CVE-2026-53818 |
OpenClaw: MCP loopback could skip owner-only tool policy for non-owner callers ### Summary MCP loopback could skip owner-only tool policy … |
Vulnerable |
|
GHSA-xr4f-mjxj-w6w5
|
OpenClaw: Non-owner chat senders could issue device-pairing bootstrap codes ### Summary The bundled device-pair plugin exposed `/pair` on normal chat … |
Vulnerable |
|
GHSA-vxx3-6hc9-7cc3
Aliases: CVE-2026-53806 |
OpenClaw: Combined POSIX shell options could confuse exec revalidation ### Summary Combined POSIX shell options could confuse exec revalidation. In … |
Vulnerable |
|
GHSA-p73f-w79w-jqr5
|
OpenClaw: Native command authorization could skip owner-command enforcement ### Summary Native command authorization could skip owner-command enforcement. In affected versions, … |
Vulnerable |
|
GHSA-3wqp-prf6-2m72
|
OpenClaw: Feishu dynamic-agent bindings could miss configWrites enforcement ### Summary Feishu dynamic-agent bindings could miss configWrites enforcement. In affected versions, … |
Vulnerable |
|
GHSA-qjpc-qf9m-xwmr
|
OpenClaw: Trusted-proxy Control UI WebSocket accepted client-declared scopes before pairing ### Summary In trusted-proxy Control UI mode, OpenClaw accepted a … |
Vulnerable |
|
GHSA-cxcw-jm67-3wwp
|
Duplicate Advisory: OpenClaw's andbox browser noVNC observer lacked VNC authentication ## Duplicate Advisory This advisory has been withdrawn because it … | There are no reported fixed by versions. |
|
CVE-2026-53854
Aliases: GHSA-4hpg-mp64-x7xq |
OpenClaw: Internal/webchat command auth could inherit ownerAllowFrom wildcard state Internal/webchat command auth could inherit ownerAllowFrom wildcard state. In affected versions, … |
Vulnerable |
|
CVE-2026-53844
Aliases: GHSA-72fw-cqh5-f324 |
OpenClaw: memory-wiki shared search could miss session visibility checks memory-wiki shared search could miss session visibility checks. In affected versions, … |
Vulnerable |
|
CVE-2026-53863
Aliases: GHSA-985f-72mj-8gf7 |
OpenClaw: Tool group policy callers could accept unvalidated group IDs Tool group policy callers could accept unvalidated group IDs. In … |
Vulnerable |
|
GHSA-r849-826x-wgqm
|
Duplicate Advisory: Signal group allowlist authorization bypass via DM pairing-store leakage ## Duplicate Advisory This advisory has been withdrawn because … | There are no reported fixed by versions. |
|
CVE-2026-53848
Aliases: GHSA-cwpp-5962-q4f6 |
OpenClaw: Exec allowlist could miss side effects from transparent command wrappers Exec allowlist could miss side effects from transparent command … |
Vulnerable |
|
CVE-2026-53866
Aliases: GHSA-f397-5vjw-v2c2 |
OpenClaw: Shell inline-command parsing could miss an allowlist check Shell inline-command parsing could miss an allowlist check. In affected versions, … |
Vulnerable |
|
GHSA-3r78-rqg8-95gg
|
Duplicate Advisory: OpenClaw's voice-call Twilio webhook replay could bypass manager dedupe because normalized event IDs were randomized per parse ## … | There are no reported fixed by versions. |
|
GHSA-cjq8-m7wj-xmq9
|
Duplicate Advisory: OpenClaw Node system.run approval context-binding weakness in approval-enabled host=node flows ## Duplicate Advisory This advisory has been withdrawn … | There are no reported fixed by versions. |
|
GHSA-xq3g-m3j8-2vmm
|
Duplicate Advisory: OpenClaw's inbound media downloads could exceed configured byte limits before rejection across multiple channels ## Duplicate Advisory This … | There are no reported fixed by versions. |
|
CVE-2026-53861
Aliases: GHSA-c226-q6fx-6j6c |
OpenClaw: macOS Swift exec allowlist missed combined POSIX inline flags macOS Swift exec allowlist missed combined POSIX inline flags. In … |
Vulnerable |
|
GHSA-pfv5-rpcw-x34x
|
Duplicate Advisory: OpenClaw's allow-always wrapper persistence could bypass future approvals and enable command execution ## Duplicate Advisory This advisory has … | There are no reported fixed by versions. |
|
GHSA-vh4c-j2xv-9pv9
|
Duplicate Advisory: OpenClaw: BlueBubbles beta plugin webhook auth hardening (remove passwordless fallback) ## Duplicate Advisory This advisory has been withdrawn … | There are no reported fixed by versions. |
|
CVE-2026-53850
Aliases: GHSA-mpc8-jxjh-qpgh |
OpenClaw: Focus command could miss controlScope enforcement Focus command could miss controlScope enforcement. In affected versions, a caller able to … |
Vulnerable |
|
GHSA-rj39-33v7-9xrq
|
Duplicate Advisory: OpenClaw's shell startup env injection bypasses system.run allowlist intent (RCE class) ## Duplicate Advisory This advisory has been … | There are no reported fixed by versions. |
|
GHSA-qwmf-95r9-gx9x
|
Duplicate Advisory: OpenClaw's gateway tokenless Tailscale auth applied to HTTP routes ## Duplicate Advisory This advisory has been withdrawn because … | There are no reported fixed by versions. |
|
CVE-2026-53852
Aliases: GHSA-8mg9-j9cf-54cj |
OpenClaw: Empty-scope device re-pairing could confuse caller scope containment Empty-scope device re-pairing could confuse caller scope containment. In affected versions, … |
Vulnerable |
|
CVE-2026-53857
Aliases: GHSA-8c59-hr4w-qg69 |
OpenClaw: Zalo allowFrom could bind to mutable display names Zalo allowFrom could bind to mutable display names. In affected versions, … |
Vulnerable |
|
GHSA-5326-6f73-m96w
|
Duplicate Advisory: OpenClaw macOS companion app (beta): allowlist parsing mismatch for system.run shell chains ## Duplicate Advisory This advisory has … | There are no reported fixed by versions. |
|
CVE-2026-53847
Aliases: GHSA-x629-46cc-7xgw |
OpenClaw: Active Memory write scope could mutate global config Active Memory write scope could mutate global config. In affected versions, … |
Vulnerable |
|
CVE-2026-53841
Aliases: GHSA-w9hf-3pp7-pvxv |
OpenClaw: Exported session HTML could keep unsafe markdown links Exported session HTML could keep unsafe markdown links. In affected versions, … |
Vulnerable |
|
CVE-2026-53862
Aliases: GHSA-9v8j-9c9g-w66c |
OpenClaw: Bootstrap token replay could widen pending pairing scopes Bootstrap token replay could widen pending pairing scopes. In affected versions, … |
Vulnerable |
|
CVE-2026-53856
Aliases: GHSA-rwp6-7w3q-75fq |
OpenClaw: Config recovery could restore openclaw.json with broad file permissions Config recovery could restore openclaw.json with broad file permissions. In … |
Vulnerable |
|
CVE-2026-53849
Aliases: GHSA-cw4q-gqg5-g38h |
OpenClaw: Discord allowFrom could bind to mutable display names Discord allowFrom could bind to mutable display names. In affected versions, … |
Vulnerable |
|
GHSA-xrgv-34cc-q765
|
Duplicate Advisory: OpenClaw's system.run allowlist bypass via shell line-continuation command substitution ## Duplicate Advisory This advisory has been withdrawn because … | There are no reported fixed by versions. |
|
GHSA-ffr4-mrhv-vfr2
|
Duplicate Advisory: OpenClaw has browser trace/download path symlink escape in temp output handling ## Duplicate Advisory This advisory has been … | There are no reported fixed by versions. |
|
GHSA-3846-mfvc-xwpf
|
Duplicate Advisory: Exec allowlist wrapper analysis did not unwrap env/shell dispatch chains ## Duplicate Advisory This advisory has been withdrawn … | There are no reported fixed by versions. |
|
CVE-2026-53851
Aliases: GHSA-fcvx-5cxc-v5p8 |
OpenClaw: Slack reaction events could ignore reaction notification settings Slack reaction events could ignore reaction notification settings. In affected versions, … |
Vulnerable |
|
GHSA-q94v-v6m9-jhq9
|
Duplicate Advisory: OpenClaw has an improper sandbox configuration vulnerability ## Duplicate Advisory This advisory has been withdrawn because it is … | There are no reported fixed by versions. |
|
CVE-2026-53859
Aliases: GHSA-gxg4-2rrr-jhc7 |
OpenClaw: Hostname checks could treat trailing-dot hosts inconsistently Hostname checks could treat trailing-dot hosts inconsistently. In affected versions, a request … |
Vulnerable |
|
GHSA-x742-88jj-7hv9
|
Duplicate Advisory: allowlist exec-guard bypass via env -S ## Duplicate Advisory This advisory has been withdrawn because it is a … | There are no reported fixed by versions. |
|
CVE-2026-53864
Aliases: GHSA-ccwh-wwpp-6wg5 |
OpenClaw: Host environment sanitizer missed two Node.js control variables Host environment sanitizer missed two Node.js control variables. In affected versions, … |
Vulnerable |
|
CVE-2026-53860
Aliases: GHSA-8j37-5w68-wj2g |
OpenClaw: BlueBubbles sender policy could match mutable conversation identifiers BlueBubbles sender policy could match mutable conversation identifiers. In affected versions, … |
Vulnerable |
|
CVE-2026-53845
Aliases: GHSA-68xw-r643-9p5w |
OpenClaw: Skill-command dispatch could skip before-tool-call hooks Skill-command dispatch could skip before-tool-call hooks. In affected versions, a skill command routed … |
Vulnerable |
|
GHSA-2j8v-hwgc-x698
|
OpenClaw: Shell wrapper argv could change between approval and execution Shell wrapper argv could change between approval and execution. In … |
Vulnerable |
|
GHSA-c29c-2q9c-pc86
|
OpenClaw: Slack allowFrom could bind to mutable display names Slack allowFrom could bind to mutable display names. In affected versions, … |
Vulnerable |
|
GHSA-p73f-w79w-jqr5
|
OpenClaw: Native command authorization could skip owner-command enforcement Native command authorization could skip owner-command enforcement. In affected versions, a sender … |
Vulnerable |
|
GHSA-w5ww-7chg-mxcq
|
OpenClaw: Telegram interactive callbacks could skip commands.allowFrom Telegram interactive callbacks could skip commands.allowFrom. In affected versions, a Telegram user able … |
Vulnerable |
|
GHSA-grc3-2j34-p6gm
|
OpenClaw: message.action forwarding could send Gateway credentials to model-supplied loopback URLs message.action forwarding could send Gateway credentials to model-supplied loopback … |
Vulnerable |
|
GHSA-3wqp-prf6-2m72
|
OpenClaw: Feishu dynamic-agent bindings could miss configWrites enforcement Feishu dynamic-agent bindings could miss configWrites enforcement. In affected versions, a Feishu … |
Vulnerable |
|
GHSA-cqwv-9qjx-vxw2
|
OpenClaw: Skill Workshop apply flow could override pending approval Skill Workshop apply flow could override pending approval. In affected versions, … |
Vulnerable |
|
CVE-2026-53806
Aliases: GHSA-vxx3-6hc9-7cc3 |
OpenClaw: Combined POSIX shell options could confuse exec revalidation Combined POSIX shell options could confuse exec revalidation. In affected versions, … |
Vulnerable |
|
CVE-2026-53809
Aliases: GHSA-p39j-x9h5-q66m |
OpenClaw: Embedded runner policy could be confused by provider aliases Embedded runner policy could be confused by provider aliases. In … |
Vulnerable |
|
CVE-2026-53811
Aliases: GHSA-7hxm-f538-3xp6 |
OpenClaw: Matrix allowFrom could bind to mutable display names Matrix allowFrom could bind to mutable display names. In affected versions, … |
Vulnerable |
|
CVE-2026-53813
Aliases: GHSA-v8cx-933x-r976 |
OpenClaw: Fake package roots could influence memory-core artifact loading Fake package roots could influence memory-core artifact loading. In affected versions, … |
Vulnerable |
|
GHSA-6c4r-g249-wv3c
|
OpenClaw: Sandboxed session spawn could expose the real workspace path to child prompts Sandboxed session spawn could expose the real … |
Vulnerable |
|
GHSA-4m3v-q747-pc6h
|
OpenClaw: Mattermost slash token revocation could lag until monitor refresh Mattermost slash token revocation could lag until monitor refresh. In … |
Vulnerable |
|
GHSA-j472-gf56-x589
Aliases: CVE-2026-53836 |
OpenClaw: PowerShell encoded-command aliases could miss exec allowlist checks PowerShell encoded-command aliases could miss exec allowlist checks. In affected versions, … |
Vulnerable |
|
GHSA-jvm4-4j77-39p6
Aliases: CVE-2026-53833 |
OpenClaw: QQBot streaming command could mutate config without explicit allowFrom QQBot streaming command could mutate config without explicit allowFrom. In … |
Vulnerable Vulnerable |
|
GHSA-r27j-fxmq-rg2q
|
Duplicate Advisory: OpenClaw: QQBot streaming command could mutate config without explicit allowFrom ### Duplicate Advisory This advisory has been withdrawn … |
Vulnerable |
|
GHSA-ffhm-8fwq-7q27
|
Duplicate Advisory: OpenClaw: PowerShell encoded-command aliases could miss exec allowlist checks ### Duplicate Advisory This advisory has been withdrawn because … |
Vulnerable |
|
GHSA-35c7-4r45-9gv3
|
Duplicate Advisory: OpenClaw: QQBot pre-dispatch slash commands could skip allowFrom checks ### Duplicate Advisory This advisory has been withdrawn because … |
Vulnerable |
|
GHSA-gwcq-453v-2frr
|
Duplicate Advisory: OpenClaw's POSIX node system.run safe-bin allowlist could be widened by shell expansion ### Duplicate Advisory This advisory has … |
Vulnerable |
|
GHSA-chqm-wxm2-w73w
|
Duplicate Advisory: OpenClaw: Mattermost handlers could fall open when channel type was missing ### Duplicate Advisory This advisory has been … |
Vulnerable |
|
GHSA-3qg8-hq7j-jj33
|
Duplicate Advisory: OpenClaw: Same-host trusted-proxy deployments could accept local forged identity headers ### Duplicate Advisory This advisory has been withdrawn … |
Vulnerable |
|
GHSA-c85p-9pvr-f7f5
|
Duplicate Advisory: OpenClaw: Node pairing reconnection could confuse approval scope state ### Duplicate Advisory This advisory has been withdrawn because … |
Vulnerable |
|
GHSA-jvm4-4j77-39p6
Aliases: CVE-2026-53833 |
OpenClaw: QQBot streaming command could mutate config without explicit allowFrom ### Summary QQBot streaming command could mutate config without explicit … |
Vulnerable Vulnerable |
|
GHSA-mhq8-78pj-5j79
Aliases: CVE-2026-53831 |
OpenClaw's POSIX node system.run safe-bin allowlist could be widened by shell expansion ### Summary On POSIX nodes, OpenClaw's `system.run` safe-bin … |
Vulnerable Vulnerable |
|
GHSA-j472-gf56-x589
Aliases: CVE-2026-53836 |
OpenClaw: PowerShell encoded-command aliases could miss exec allowlist checks ### Summary PowerShell encoded-command aliases could miss exec allowlist checks. In … |
Vulnerable Vulnerable |
|
GHSA-gp79-m99v-gjmh
Aliases: CVE-2026-53837 |
OpenClaw: Mattermost handlers could fall open when channel type was missing ### Summary Mattermost handlers could fall open when channel … |
Vulnerable Vulnerable |
|
GHSA-rggc-m335-3wvj
Aliases: CVE-2026-53832 |
OpenClaw: Same-host trusted-proxy deployments could accept local forged identity headers ### Summary Same-host trusted-proxy deployments could accept local forged identity … |
Vulnerable Vulnerable |
|
GHSA-83w9-h5wv-j9xm
Aliases: CVE-2026-53838 |
OpenClaw: Node pairing reconnection could confuse approval scope state ### Summary Node pairing reconnection could confuse approval scope state. In … |
Vulnerable Vulnerable |
|
GHSA-77pv-3w4q-vrj5
Aliases: CVE-2026-53834 |
OpenClaw: QQBot pre-dispatch slash commands could skip allowFrom checks ### Summary QQBot pre-dispatch slash commands could skip allowFrom checks. In … |
Vulnerable Vulnerable |
|
GHSA-77pv-3w4q-vrj5
Aliases: CVE-2026-53834 |
OpenClaw: QQBot pre-dispatch slash commands could skip allowFrom checks QQBot pre-dispatch slash commands could skip allowFrom checks. In affected versions, … |
Vulnerable Vulnerable |
|
GHSA-gp79-m99v-gjmh
Aliases: CVE-2026-53837 |
OpenClaw: Mattermost handlers could fall open when channel type was missing Mattermost handlers could fall open when channel type was … |
Vulnerable Vulnerable |
|
GHSA-h36m-2vh5-x699
|
Duplicate Advisory: ACPX Windows wrapper shell fallback allowed cwd injection in specific paths ## Duplicate Advisory This advisory has been … | There are no reported fixed by versions. |
|
GHSA-jw7v-5mp7-ghgm
|
Duplicate Advisory: Browser CDP discovery could accept blocked WebSocket URLs ## Duplicate Advisory This advisory has been withdrawn because it … |
Vulnerable |
|
GHSA-3x84-qq85-fj65
Aliases: CVE-2026-62197 |
OpenClaw: Browser CDP discovery could accept blocked WebSocket URLs ### Summary Browser CDP discovery could accept blocked WebSocket URLs. In … |
Vulnerable |