Skip to content
OpenAdvisories
High WID-SEC-2026-0551 8 CVEs

OpenClaw: Mehrere Schwachstellen

Published Feb 26, 2026 · Updated Mar 24, 2026 · Revision 6 · de-DE

Summary

Ein Angreifer kann mehrere Schwachstellen in OpenClaw ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand zu verursachen oder andere nicht näher spezifizierte Angriffe durchzuführen.

Product

OpenClaw ist ein persönlicher KI-Assistent zur Ausführung auf eigenen Geräten.

Vulnerabilities 8

  • Critical 9.9
    CVE-2026-28363 Public exploit

    OpenClaw's tools.exec.safeBins sort long-option abbreviation bypass can skip exec approval in allowlist mode

    In OpenClaw before 2026.2.23, tools.exec.safeBins validation for sort could be bypassed via GNU long-option abbreviations (such as --compress-prog) in allowlist mode, leading to approval-free execution paths that were intended to require approval. Only an exa…

    OpenClaw OpenClaw openclaw npm
  • High 8.8
    CVE-2026-32059

    OpenClaw 2026.2.22-2 < 2026.2.23 - Allowlist Bypass via sort Long-Option Abbreviation in tools.exec.safeBins

    OpenClaw version 2026.2.22-2 prior to 2026.2.23 tools.exec.safeBins validation for sort command fails to properly validate GNU long-option abbreviations, allowing attackers to bypass denied-flag checks via abbreviated options. Remote attackers can execute sor…

    OpenClaw OpenClaw
  • High 8.0
    CVE-2026-32014

    OpenClaw < 2026.2.26 - Node Reconnect Metadata Spoofing via Unsigned Platform Fields

    OpenClaw versions prior to 2026.2.26 contain a metadata spoofing vulnerability where reconnect platform and deviceFamily fields are accepted from the client without being bound into the device-auth signature. An attacker with a paired node identity on the tru…

    OpenClaw OpenClaw openclaw npm
  • Medium 6.5
    CVE-2026-32036

    OpenClaw < 2026.2.26- Authentication Bypass via Encoded Dot-Segment Traversal in /api/channels

    OpenClaw gateway plugin versions prior to 2026.2.26 contain a path traversal vulnerability that allows remote attackers to bypass route authentication checks by manipulating /api/channels paths with encoded dot-segment traversal sequences. Attackers can craft…

    OpenClaw OpenClaw openclaw npm
  • Medium 6.1
    CVE-2026-27545

    OpenClaw < 2026.2.26 - Approval Bypass via Parent Symlink Current Working Directory Rebind

    OpenClaw versions prior to 2026.2.26 contain an approval bypass vulnerability in system.run execution that allows attackers to execute commands from unintended filesystem locations by rebinding writable parent symlinks in the current working directory after a…

    OpenClaw OpenClaw openclaw npm
  • Medium 5.4
    CVE-2026-32895

    OpenClaw < 2026.2.26 - Sender Authorization Bypass in Slack System Event Handlers

    OpenClaw versions prior to 2026.2.26 fail to enforce sender authorization in member and message subtype system event handlers, allowing unauthorized events to be enqueued. Attackers can bypass Slack DM allowlists and per-channel user allowlists by sending sys…

    OpenClaw OpenClaw openclaw npm
  • Low 3.7
    CVE-2026-32067

    OpenClaw < 2026.2.26 - Cross-Account Authorization Bypass in DM Pairing Store

    OpenClaw versions prior to 2026.2.26 contain an authorization bypass vulnerability in the pairing-store access control for direct message pairing policy that allows attackers to reuse pairing approvals across multiple accounts. An attacker approved as a sende…

    OpenClaw OpenClaw openclaw npm
  • Low 2.6
    CVE-2026-32058

    OpenClaw < 2026.2.26 - Approval Context-Binding Weakness in system.run via host=node

    OpenClaw versions prior to 2026.2.26 contain an approval context-binding weakness in system.run execution flows with host=node that allows reuse of previously approved requests with modified environment variables. Attackers with access to an approval id can e…

    OpenClaw OpenClaw openclaw npm

Revision history

  1. #6

    Referenz(en) aufgenommen: GHSA-VMVW-PWWF-CC2W

  2. #5

    CVE ergänzt

  3. #4

    CVE-Nummern ergänzt

  4. #3

    CVE ergänzt

  5. #2

    CVE-2026-32059 ergänzt

  6. #1

    Initiale Fassung

References