Search for packages
| purl | pkg:npm/openclaw@2026.5.18-beta.1 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 4.4 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-q86m-697p-h7fh
|
Duplicate Advisory: OpenClaw: system.run approvals did not bind PATH-token executable identity, enabling post-approval executable rebind ## Duplicate Advisory This advisory … | There are no reported fixed by versions. |
|
GHSA-44c9-4rg5-qjgq
|
Duplicate Advisory: web_search citation redirect SSRF via private-network-allowing policy ## Duplicate Advisory This advisory has been withdrawn because it is … | There are no reported fixed by versions. |
|
GHSA-wr92-6w3g-2hwc
|
Duplicate Advisory: OpenClaw's sandboxed sessions_spawn now enforces sandbox inheritance for cross-agent spawns ## Duplicate Advisory This advisory has been withdrawn … | There are no reported fixed by versions. |
|
GHSA-vqx6-6j84-2794
|
Duplicate Advisory: Hostname checks could treat trailing-dot hosts inconsistently ## Duplicate Advisory This advisory has been withdrawn because it is … | There are no reported fixed by versions. |
|
GHSA-gxg4-2rrr-jhc7
Aliases: CVE-2026-53859 |
OpenClaw: Hostname checks could treat trailing-dot hosts inconsistently ### Summary Hostname checks could treat trailing-dot hosts inconsistently. In affected versions, … |
Vulnerable |
|
GHSA-wrr6-p5r6-474m
|
Duplicate Advisory: Exec allowlist could miss side effects from transparent command wrappers ## Duplicate Advisory This advisory has been withdrawn … | There are no reported fixed by versions. |
|
GHSA-ccwh-wwpp-6wg5
Aliases: CVE-2026-53864 |
OpenClaw: Host environment sanitizer missed two Node.js control variables ### Summary Host environment sanitizer missed two Node.js control variables. In … |
Vulnerable |
|
GHSA-cwpp-5962-q4f6
Aliases: CVE-2026-53848 |
OpenClaw: Exec allowlist could miss side effects from transparent command wrappers ### Summary Exec allowlist could miss side effects from … |
Vulnerable |
|
GHSA-q99w-vh6v-q3v7
Aliases: CVE-2026-53843 |
OpenClaw: Pairing-scoped device session could restore revoked node token authority ### Summary In affected releases, a surviving pairing-scoped session for … |
Vulnerable |
|
GHSA-vr6h-vxqj-3pjx
|
Duplicate Advisory: Host environment sanitizer missed two Node.js control variables ## Duplicate Advisory This advisory has been withdrawn because it … | There are no reported fixed by versions. |
|
GHSA-9c3v-684m-579c
|
OpenClaw MCP SSE redirects could forward Authorization headers ### Summary MCP SSE redirects could forward Authorization headers. In affected versions, … |
Vulnerable |
|
GHSA-v6r2-jh58-xx6w
Aliases: CVE-2026-53810 |
OpenClaw's marketplace runtime extension metadata could point at unscanned payloads ### Summary Marketplace runtime extension metadata could point at unscanned … |
Vulnerable |
|
GHSA-2hfg-4fh4-qp7f
Aliases: CVE-2026-53812 |
OpenClaw's browser act interactions could bypass private-network navigation checks ### Summary OpenClaw's browser control SSRF checks blocked direct navigation to … |
Vulnerable |
|
GHSA-hw9r-h9mr-4jff
|
OpenClaw: Scoped chat.send route inheritance could bypass admin command scope gates ### Summary Some internal command handlers require `operator.approvals` or … |
Vulnerable |
|
GHSA-chr9-m4q2-76hw
Aliases: CVE-2026-53817 |
OpenClaw: Control UI locality spoofing could mint a durable admin device token ### Summary In affected LAN/shared-token Control UI deployments, … |
Vulnerable |
|
GHSA-q7q8-3mgw-q67r
Aliases: CVE-2026-53815 |
OpenClaw: Message read actions could skip channel allowlist checks ### Summary Message read actions could skip channel allowlist checks. In … |
Vulnerable |
|
GHSA-6fvr-66p3-3qj4
Aliases: CVE-2026-53814 |
OpenClaw: Hook-triggered CLI runs could receive owner MCP tool authority ### Summary OpenClaw hook ingress can start automated agent runs … |
Vulnerable |
|
GHSA-xww8-gqvh-92x9
|
OpenClaw: Exec approval display truncation could hide the command being approved ### Summary OpenClaw exec approvals could show a shortened … |
Vulnerable |
|
GHSA-hx4v-668p-g2qr
|
Duplicate Advisory: OpenClaw: QQBot native approval buttons did not enforce configured approver identity ### Duplicate Advisory This advisory has been … |
Vulnerable |
|
GHSA-mgq6-vr84-7m2j
Aliases: CVE-2026-35630 |
OpenClaw: QQBot native approval buttons did not enforce configured approver identity ### Summary OpenClaw's QQBot channel can deliver native approval … |
Vulnerable Vulnerable |
|
GHSA-3c6j-hq33-3jv4
Aliases: CVE-2026-53816 |
OpenClaw: Paired nodes could forge exec lifecycle events without system.run provenance ### Summary OpenClaw nodes send lifecycle events back to … |
Vulnerable |
|
GHSA-8wg3-5mcm-fjq8
Aliases: CVE-2026-53819 |
OpenClaw: Workspace .env could override Homebrew executable selection for skill install flows ### Summary Workspace .env could override Homebrew executable … |
Vulnerable |
|
GHSA-qjpc-qf9m-xwmr
|
OpenClaw: Trusted-proxy Control UI WebSocket accepted client-declared scopes before pairing ### Summary In trusted-proxy Control UI mode, OpenClaw accepted a … |
Vulnerable |
|
GHSA-cxcw-jm67-3wwp
|
Duplicate Advisory: OpenClaw's andbox browser noVNC observer lacked VNC authentication ## Duplicate Advisory This advisory has been withdrawn because it … | There are no reported fixed by versions. |
|
GHSA-r849-826x-wgqm
|
Duplicate Advisory: Signal group allowlist authorization bypass via DM pairing-store leakage ## Duplicate Advisory This advisory has been withdrawn because … | There are no reported fixed by versions. |
|
CVE-2026-53848
Aliases: GHSA-cwpp-5962-q4f6 |
OpenClaw: Exec allowlist could miss side effects from transparent command wrappers Exec allowlist could miss side effects from transparent command … |
Vulnerable |
|
GHSA-3r78-rqg8-95gg
|
Duplicate Advisory: OpenClaw's voice-call Twilio webhook replay could bypass manager dedupe because normalized event IDs were randomized per parse ## … | There are no reported fixed by versions. |
|
GHSA-cjq8-m7wj-xmq9
|
Duplicate Advisory: OpenClaw Node system.run approval context-binding weakness in approval-enabled host=node flows ## Duplicate Advisory This advisory has been withdrawn … | There are no reported fixed by versions. |
|
GHSA-xq3g-m3j8-2vmm
|
Duplicate Advisory: OpenClaw's inbound media downloads could exceed configured byte limits before rejection across multiple channels ## Duplicate Advisory This … | There are no reported fixed by versions. |
|
GHSA-pfv5-rpcw-x34x
|
Duplicate Advisory: OpenClaw's allow-always wrapper persistence could bypass future approvals and enable command execution ## Duplicate Advisory This advisory has … | There are no reported fixed by versions. |
|
GHSA-vh4c-j2xv-9pv9
|
Duplicate Advisory: OpenClaw: BlueBubbles beta plugin webhook auth hardening (remove passwordless fallback) ## Duplicate Advisory This advisory has been withdrawn … | There are no reported fixed by versions. |
|
GHSA-rj39-33v7-9xrq
|
Duplicate Advisory: OpenClaw's shell startup env injection bypasses system.run allowlist intent (RCE class) ## Duplicate Advisory This advisory has been … | There are no reported fixed by versions. |
|
GHSA-qwmf-95r9-gx9x
|
Duplicate Advisory: OpenClaw's gateway tokenless Tailscale auth applied to HTTP routes ## Duplicate Advisory This advisory has been withdrawn because … | There are no reported fixed by versions. |
|
GHSA-5326-6f73-m96w
|
Duplicate Advisory: OpenClaw macOS companion app (beta): allowlist parsing mismatch for system.run shell chains ## Duplicate Advisory This advisory has … | There are no reported fixed by versions. |
|
GHSA-xrgv-34cc-q765
|
Duplicate Advisory: OpenClaw's system.run allowlist bypass via shell line-continuation command substitution ## Duplicate Advisory This advisory has been withdrawn because … | There are no reported fixed by versions. |
|
GHSA-ffr4-mrhv-vfr2
|
Duplicate Advisory: OpenClaw has browser trace/download path symlink escape in temp output handling ## Duplicate Advisory This advisory has been … | There are no reported fixed by versions. |
|
GHSA-3846-mfvc-xwpf
|
Duplicate Advisory: Exec allowlist wrapper analysis did not unwrap env/shell dispatch chains ## Duplicate Advisory This advisory has been withdrawn … | There are no reported fixed by versions. |
|
GHSA-q94v-v6m9-jhq9
|
Duplicate Advisory: OpenClaw has an improper sandbox configuration vulnerability ## Duplicate Advisory This advisory has been withdrawn because it is … | There are no reported fixed by versions. |
|
CVE-2026-53859
Aliases: GHSA-gxg4-2rrr-jhc7 |
OpenClaw: Hostname checks could treat trailing-dot hosts inconsistently Hostname checks could treat trailing-dot hosts inconsistently. In affected versions, a request … |
Vulnerable |
|
GHSA-x742-88jj-7hv9
|
Duplicate Advisory: allowlist exec-guard bypass via env -S ## Duplicate Advisory This advisory has been withdrawn because it is a … | There are no reported fixed by versions. |
|
CVE-2026-53864
Aliases: GHSA-ccwh-wwpp-6wg5 |
OpenClaw: Host environment sanitizer missed two Node.js control variables Host environment sanitizer missed two Node.js control variables. In affected versions, … |
Vulnerable |
|
GHSA-2j8v-hwgc-x698
|
OpenClaw: Shell wrapper argv could change between approval and execution Shell wrapper argv could change between approval and execution. In … |
Vulnerable |
|
GHSA-gwcq-453v-2frr
|
Duplicate Advisory: OpenClaw's POSIX node system.run safe-bin allowlist could be widened by shell expansion ### Duplicate Advisory This advisory has … |
Vulnerable |
|
GHSA-3qg8-hq7j-jj33
|
Duplicate Advisory: OpenClaw: Same-host trusted-proxy deployments could accept local forged identity headers ### Duplicate Advisory This advisory has been withdrawn … |
Vulnerable |
|
GHSA-c85p-9pvr-f7f5
|
Duplicate Advisory: OpenClaw: Node pairing reconnection could confuse approval scope state ### Duplicate Advisory This advisory has been withdrawn because … |
Vulnerable |
|
GHSA-mhq8-78pj-5j79
Aliases: CVE-2026-53831 |
OpenClaw's POSIX node system.run safe-bin allowlist could be widened by shell expansion ### Summary On POSIX nodes, OpenClaw's `system.run` safe-bin … |
Vulnerable Vulnerable |
|
GHSA-rggc-m335-3wvj
Aliases: CVE-2026-53832 |
OpenClaw: Same-host trusted-proxy deployments could accept local forged identity headers ### Summary Same-host trusted-proxy deployments could accept local forged identity … |
Vulnerable Vulnerable |
|
GHSA-83w9-h5wv-j9xm
Aliases: CVE-2026-53838 |
OpenClaw: Node pairing reconnection could confuse approval scope state ### Summary Node pairing reconnection could confuse approval scope state. In … |
Vulnerable Vulnerable |
|
GHSA-h36m-2vh5-x699
|
Duplicate Advisory: ACPX Windows wrapper shell fallback allowed cwd injection in specific paths ## Duplicate Advisory This advisory has been … | There are no reported fixed by versions. |
|
GHSA-jw7v-5mp7-ghgm
|
Duplicate Advisory: Browser CDP discovery could accept blocked WebSocket URLs ## Duplicate Advisory This advisory has been withdrawn because it … |
Vulnerable |
|
GHSA-3x84-qq85-fj65
Aliases: CVE-2026-62197 |
OpenClaw: Browser CDP discovery could accept blocked WebSocket URLs ### Summary Browser CDP discovery could accept blocked WebSocket URLs. In … |
Vulnerable |