Skip to content
OpenAdvisories
High WID-SEC-2026-0501 7 CVEs

OpenClaw: Mehrere Schwachstellen

Published Feb 24, 2026 · Updated Mar 23, 2026 · Revision 5 · de-DE

Summary

Ein Angreifer kann mehrere Schwachstellen in OpenClaw ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, einen Denial-of-Service-Zustand zu verursachen, vertrauliche Informationen offenzulegen oder andere nicht näher definierte Angriffe durchzuführen.

Product

OpenClaw ist ein persönlicher KI-Assistent zur Ausführung auf eigenen Geräten.

Vulnerabilities 7

  • Critical 9.8
    CVE-2026-32038

    OpenClaw - Sandbox Network Isolation Bypass via docker.network=container Parameter

    OpenClaw before 2026.2.24 contains a sandbox network isolation bypass vulnerability that allows trusted operators to join another container's network namespace. Attackers can configure the docker.network parameter with container:<id> values to reach services …

    OpenClaw OpenClaw openclaw npm
  • High 8.6
    CVE-2026-31998

    OpenClaw 2026.2.22 < 2026.2.24 - Authorization Bypass in Synology Chat Plugin via Empty allowedUserIds

    OpenClaw versions 2026.2.22 and 2026.2.23 contain an authorization bypass vulnerability in the synology-chat channel plugin where dmPolicy set to allowlist with empty allowedUserIds fails open. Attackers with Synology sender access can bypass authorization ch…

    OpenClaw OpenClaw openclaw npm
  • Medium 6.5
    CVE-2026-27522

    OpenClaw < 2026.2.24 - Arbitrary File Read via sendAttachment and setGroupIcon Message Actions

    OpenClaw versions prior to 2026.2.24 contain a local media root bypass vulnerability in sendAttachment and setGroupIcon message actions when sandboxRoot is unset. Attackers can hydrate media from local absolute paths to read arbitrary host files accessible by…

    OpenClaw OpenClaw openclaw npm
  • Medium 6.5
    CVE-2026-32033

    OpenClaw < 2026.2.24 - Path Traversal via @-prefixed Absolute Paths in Workspace Boundary Validation

    OpenClaw versions prior to 2026.2.24 contain a path traversal vulnerability where @-prefixed absolute paths bypass workspace-only file-system boundary validation due to canonicalization mismatch. Attackers can exploit this by crafting @-prefixed paths like @/…

    OpenClaw OpenClaw openclaw npm
  • Medium 6.1
    CVE-2026-27523

    OpenClaw < 2026.2.24 - Sandbox Bind Validation Bypass via Symlink-Parent Missing-Leaf Paths

    OpenClaw versions prior to 2026.2.24 contain a sandbox bind validation vulnerability allowing attackers to bypass allowed-root and blocked-path checks via symlinked parent directories with non-existent leaf paths. Attackers can craft bind source paths that ap…

    OpenClaw OpenClaw openclaw npm
  • Medium 6.1
    CVE-2026-32911 Rejected

    This CVE ID has been rejected.

  • Medium 5.7
    CVE-2026-32009

    OpenClaw < 2026.2.24 - Binary Hijacking via Static Default Trusted Directories in safeBins

    OpenClaw versions prior to 2026.2.24 contain a policy bypass vulnerability in the safeBins allowlist evaluation that trusts static default directories including writable package-manager paths like /opt/homebrew/bin and /usr/local/bin. An attacker with write a…

    OpenClaw OpenClaw openclaw npm

Revision history

  1. #5

    CVE ergänzt

  2. #4

    CVE-Nummern ergänzt

  3. #3

    CVE-2026-31998 ergänzt

  4. #2

    CVE's ergänzt

  5. #1

    Initiale Fassung

References