Skip to content
OpenAdvisories
High WID-SEC-2026-0459 6 CVEs

OpenClaw: Mehrere Schwachstellen

Published Feb 18, 2026 · Updated Feb 18, 2026 · de-DE

Summary

Ein Angreifer kann mehrere Schwachstellen in OpenClaw ausnutzen, um beliebigen Programmcode auszuführen, Rechte zu erweitern, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, Cross-Site-Scripting-Angriffe durchzuführen oder vertrauliche Informationen offenzulegen.

Product

OpenClaw ist ein persönlicher KI-Assistent zur Ausführung auf eigenen Geräten.

Vulnerabilities 6

  • High 8.6
    CVE-2026-27001

    OpenClaw: Unsanitized CWD path injection into LLM prompts

    OpenClaw is a personal AI assistant. Prior to version 2026.2.15, OpenClaw embedded the current working directory (workspace path) into the agent system prompt without sanitization. If an attacker can cause OpenClaw to run inside a directory whose name contain…

    OpenClaw OpenClaw openclaw npm
  • High 7.7
    CVE-2026-27002

    OpenClaw: Docker container escape via unvalidated bind mount config injection

    OpenClaw is a personal AI assistant. Prior to version 2026.2.15, a configuration injection issue in the Docker tool sandbox could allow dangerous Docker options (bind mounts, host networking, unconfined profiles) to be applied, enabling container escape or ho…

    OpenClaw OpenClaw openclaw npm
  • Medium 6.9
    CVE-2026-27003

    OpenClaw: Telegram bot token exposure via logs

    OpenClaw is a personal AI assistant. Telegram bot tokens can appear in error messages and stack traces (for example, when request URLs include `https://api.telegram.org/bot<token>/...`). Prior to version 2026.2.15, OpenClaw logged these strings without redact…

    OpenClaw OpenClaw openclaw npm
  • Medium 6.8
    CVE-2026-27008

    OpenClaw hardened the skill download target directory validation

    OpenClaw is a personal AI assistant. Prior to version 2026.2.15, a bug in `download` skill installation allowed `targetDir` values from skill frontmatter to resolve outside the per-skill tools directory if not strictly validated. In the admin-only `skills.ins…

    OpenClaw OpenClaw openclaw npm
  • Medium 5.8
    CVE-2026-27009

    OpenClaw affected by Stored XSS in Control UI via unsanitized assistant name/avatar in inline script injection

    OpenClaw is a personal AI assistant. Prior to version 2026.2.15, a atored XSS issue in the OpenClaw Control UI when rendering assistant identity (name/avatar) into an inline `<script>` tag without script-context-safe escaping. A crafted value containing `</sc…

    OpenClaw OpenClaw openclaw npm
  • Medium 4.8
    CVE-2026-27007

    OpenClaw's sandbox config hash sorted primitive arrays and suppressed needed container recreation

    OpenClaw is a personal AI assistant. Prior to version 2026.2.15, `normalizeForHash` in `src/agents/sandbox/config-hash.ts` recursively sorted arrays that contained only primitive values. This made order-sensitive sandbox configuration arrays hash to the same …

    OpenClaw OpenClaw openclaw npm

Revision history

  1. #1

    Initiale Fassung

References