Skip to content
OpenAdvisories
High WID-SEC-2026-0573 12 CVEs

OpenClaw: Mehrere Schwachstellen

Published Mar 2, 2026 · Updated Mar 23, 2026 · Revision 6 · de-DE

Summary

Ein Angreifer kann mehrere Schwachstellen in OpenClaw ausnutzen, um beliebigen Code auszuführen, Daten zu manipulieren, einen Denial-of-Service-Zustand zu verursachen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen oder andere nicht näher spezifizierte Angriffe durchzuführen.

Product

OpenClaw ist ein persönlicher KI-Assistent zur Ausführung auf eigenen Geräten.

Vulnerabilities 12

  • High 7.6
    CVE-2026-22181

    OpenClaw < 2026.3.2 - DNS Pinning Bypass via Environment Proxy Configuration in web_fetch

    OpenClaw versions prior to 2026.3.2 contain a DNS pinning bypass vulnerability in strict URL fetch paths that allows attackers to circumvent SSRF guards when environment proxy variables are configured. When HTTP_PROXY, HTTPS_PROXY, or ALL_PROXY environment va…

    OpenClaw OpenClaw openclaw npm
  • High 7.5
    CVE-2026-32011

    OpenClaw < 2026.3.2 - Slow-Request Denial of Service via Pre-Auth Webhook Body Parsing

    OpenClaw versions prior to 2026.3.2 contain a denial of service vulnerability in webhook handlers for BlueBubbles and Google Chat that parse request bodies before performing authentication and signature validation. Unauthenticated attackers can exploit this b…

    OpenClaw OpenClaw openclaw npm
  • Medium 6.9
    CVE-2026-32903 Rejected

    This CVE ID has been rejected.

  • Medium 6.7
    CVE-2026-29608

    OpenClaw 2026.3.1 < 2026.3.2 - Approval Integrity Bypass via system.run argv Rewriting

    OpenClaw 2026.3.1 contains an approval integrity vulnerability in system.run node-host execution where argv rewriting changes command semantics. Attackers can place malicious local scripts in the working directory to execute unintended code despite operator a…

    OpenClaw OpenClaw openclaw npm
  • Medium 6.5
    CVE-2026-32004

    OpenClaw < 2026.3.2 - Authentication Bypass via Encoded Path in /api/channels Route

    OpenClaw versions prior to 2026.3.2 contain an authentication bypass vulnerability in the /api/channels route classification due to canonicalization depth mismatch between auth-path classification and route-path canonicalization. Attackers can bypass plugin r…

    OpenClaw OpenClaw openclaw npm
  • Medium 6.1
    CVE-2026-31990

    OpenClaw < 2026.3.2 - Symlink Traversal in stageSandboxMedia Destination

    OpenClaw versions prior to 2026.3.2 contain a vulnerability in the stageSandboxMedia function in which it fails to validate destination symlinks during media staging, allowing writes to follow symlinks outside the sandbox workspace. Attackers can exploit this…

    OpenClaw OpenClaw openclaw npm
  • Medium 5.9
    CVE-2026-32035

    OpenClaw < 2026.3.2 - Missing Owner Flag Validation in Discord Voice Transcript Handler

    OpenClaw versions prior to 2026.3.2 fail to pass the senderIsOwner flag when processing Discord voice transcripts in agentCommand, causing the flag to default to true. Non-owner voice participants can exploit this omission to access owner-only tools including…

    OpenClaw OpenClaw openclaw npm
  • Medium 5.8
    CVE-2026-28483 Rejected

    This CVE ID has been rejected.

  • Medium 5.5
    CVE-2026-32044

    OpenClaw < 2026.3.2 - Tar Archive Safety Bypass in Skills Installation

    OpenClaw versions prior to 2026.3.2 contain an archive extraction vulnerability in the tar.bz2 installer path that bypasses safety checks enforced on other archive formats. Attackers can craft malicious tar.bz2 skill archives to bypass special-entry blocking …

    OpenClaw OpenClaw openclaw npm
  • Medium 5.4
    CVE-2026-32901 Rejected

    This CVE ID has been rejected.

  • Medium 5.3
    CVE-2026-22180

    OpenClaw < 2026.3.2 - Path Confinement Bypass in Browser Output and File Write Operations

    OpenClaw versions prior to 2026.3.2 contain a path-confinement bypass vulnerability in browser output handling that allows writes outside intended root directories. Attackers can exploit insufficient canonical path-boundary validation in file write operations…

    OpenClaw OpenClaw openclaw npm
  • Medium 5.3
    CVE-2026-27670

    OpenClaw < 2026.3.2 - Arbitrary File Write via ZIP Extraction Parent Symlink Race Condition

    OpenClaw versions prior to 2026.3.2 contain a race condition vulnerability in ZIP extraction that allows local attackers to write files outside the intended destination directory. Attackers can exploit a time-of-check-time-of-use race between path validation …

    OpenClaw OpenClaw openclaw npm

Revision history

  1. #6

    CVE's ergänzt

  2. #5

    CVE ergänzt

  3. #4

    CVE-2026-32004, CVE-2026-32011, CVE-2026-32035 ergänzt

  4. #3

    CVE-2026-27670, CVE-2026-29608, CVE-2026-31990 ergänzt

  5. #2

    CVE's ergänzt

  6. #1

    Initiale Fassung

References