Skip to content
OpenAdvisories
High WID-SEC-2026-0586 16 CVEs

OpenClaw: Mehrere Schwachstellen

Published Mar 3, 2026 · Updated Mar 24, 2026 · Revision 7 · de-DE

Summary

Ein Angreifer kann mehrere Schwachstellen in OpenClaw ausnutzen, um beliebigen Code auszuführen, sich erhöhte Berechtigungen zu verschaffen, Daten zu manipulieren, einen Denial-of-Service-Zustand herbeizuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen oder andere nicht näher spezifizierte Angriffe durchzuführen.

Product

OpenClaw ist ein persönlicher KI-Assistent zur Ausführung auf eigenen Geräten.

Vulnerabilities 16

  • High 8.2
    CVE-2026-22171

    OpenClaw < 2026.2.19 - Path Traversal in Feishu Media Temporary File Naming

    OpenClaw versions prior to 2026.2.19 contain a path traversal vulnerability in the Feishu media download flow where untrusted media keys are interpolated directly into temporary file paths in extensions/feishu/src/media.ts. An attacker who can control Feishu …

    OpenClaw OpenClaw openclaw npm
  • High 7.8
    CVE-2026-32015

    OpenClaw 2026.1.21 < 2026.2.19 - PATH Hijacking Bypass in tools.exec.safeBins Allowlist Validation

    OpenClaw versions 2026.1.21 prior to 2026.2.19 contain a path hijacking vulnerability in tools.exec.safeBins that allows attackers to bypass allowlist checks by controlling process PATH resolution. Attackers who can influence the gateway process PATH or launc…

    OpenClaw OpenClaw openclaw npm
  • High 7.5
    CVE-2026-22173 Rejected

    This CVE ID has been rejected.

  • High 7.1
    CVE-2026-28460

    OpenClaw < 2026.2.22 - Allowlist Bypass via Shell Line-Continuation Command Substitution in system.run

    OpenClaw versions prior to 2026.2.22 contain an allowlist bypass vulnerability in system.run that allows attackers to execute non-allowlisted commands by splitting command substitution using shell line-continuation characters. Attackers can bypass security an…

    OpenClaw OpenClaw openclaw npm
  • High 7.1
    CVE-2026-31992

    OpenClaw < 2026.2.23 - Allowlist Exec-Guard Bypass via env -S

    OpenClaw versions prior to 2026.2.23 contain an allowlist bypass vulnerability in system.run guardrails that allows authenticated operators to execute unintended commands. When /usr/bin/env is allowlisted, attackers can use env -S to bypass policy analysis an…

    OpenClaw OpenClaw openclaw npm
  • High 7.1
    CVE-2026-32023

    OpenClaw < 2026.2.24 - Approval Gating Bypass via Dispatch-Wrapper Depth-Cap Mismatch in system.run

    OpenClaw versions prior to 2026.2.24 contain an approval gating bypass vulnerability in system.run allowlist mode where nested transparent dispatch wrappers can suppress shell-wrapper detection. Attackers can exploit this by chaining multiple dispatch wrapper…

    OpenClaw OpenClaw openclaw npm
  • Medium 6.5
    CVE-2026-32021

    OpenClaw < 2026.2.22 - Authorization Bypass via Display Name Collision in Feishu allowFrom

    OpenClaw versions prior to 2026.2.22 contain an authorization bypass vulnerability in the Feishu allowFrom allowlist implementation that accepts mutable sender display names instead of enforcing ID-only matching. An attacker can set a display name equal to an…

    OpenClaw OpenClaw openclaw npm
  • Medium 6.5
    CVE-2026-32026

    OpenClaw < 2026.2.24 - Arbitrary File Read via Improper Temporary Path Validation in Sandbox

    OpenClaw versions prior to 2026.2.24 contain an improper path validation vulnerability in sandbox media handling that allows absolute paths under the host temporary directory outside the active sandbox root. Attackers can exploit this by providing malicious m…

    OpenClaw OpenClaw openclaw npm
  • Medium 6.5
    CVE-2026-32027

    OpenClaw < 2026.2.26 - Improper Authorization via DM Pairing Store Identity Inheritance in Group Allowlist

    OpenClaw versions prior to 2026.2.26 contain an authorization bypass vulnerability where DM pairing-store identities are incorrectly eligible for group allowlist authorization checks. Attackers can exploit this cross-context authorization flaw by using a send…

    OpenClaw OpenClaw openclaw npm
  • Medium 6.5
    CVE-2026-32053

    OpenClaw < 2026.2.23 - Twilio Webhook Replay Bypass via Randomized Event ID Normalization

    OpenClaw versions prior to 2026.2.23 contain a vulnerability in Twilio webhook event deduplication where normalized event IDs are randomized per parse, allowing replay events to bypass manager dedupe checks. Attackers can replay Twilio webhook events to trigg…

    OpenClaw OpenClaw openclaw npm
  • Medium 6.4
    CVE-2026-32052

    OpenClaw < 2026.2.24 - Hidden Command Execution via Shell-Wrapper Positional argv Carriers

    OpenClaw versions prior to 2026.2.24 contain a command injection vulnerability in the system.run shell-wrapper that allows attackers to execute hidden commands by injecting positional argv carriers after inline shell payloads. Attackers can craft misleading a…

    OpenClaw OpenClaw openclaw npm
  • Medium 6.1
    CVE-2026-22176

    OpenClaw < 2026.2.19 - Command Injection via Unescaped Environment Variables in Windows Scheduled Task Script Generation

    OpenClaw versions prior to 2026.2.19 contain a command injection vulnerability in Windows Scheduled Task script generation where environment variables are written to gateway.cmd using unquoted set KEY=VALUE assignments, allowing shell metacharacters to break …

    OpenClaw OpenClaw openclaw npm
  • Medium 6.0
    CVE-2026-32037

    OpenClaw < 2026.2.22 - Redirect Chain Bypass of Media Host Allowlist in MSTeams Attachment Handling

    OpenClaw versions prior to 2026.2.22 fail to consistently validate redirect chains against configured mediaAllowHosts allowlists during MSTeams media downloads. Attackers can supply or influence attachment URLs to force redirects to non-allowlisted targets, b…

    OpenClaw OpenClaw openclaw npm
  • Medium 5.8
    CVE-2026-32047 Rejected

    This CVE ID has been rejected.

  • Medium 5.4
    CVE-2026-32001

    OpenClaw < 2026.2.22 - Node Role Device-Identity Bypass via WebSocket Authentication

    OpenClaw versions prior to 2026.2.22 contain an authentication bypass vulnerability that allows clients authenticated with a shared gateway token to connect as role=node without device identity verification. Attackers can exploit this by claiming the node rol…

    OpenClaw OpenClaw openclaw npm
  • Low 3.1
    CVE-2026-32006

    OpenClaw < 2026.2.26 - Authorization Bypass via DM Pairing-Store Fallback in Group Allowlist

    OpenClaw versions prior to 2026.2.26 contain an authorization bypass vulnerability where DM pairing-store identities are incorrectly treated as group allowlist identities when dmPolicy=pairing and groupPolicy=allowlist. Remote attackers can send messages and …

    OpenClaw OpenClaw openclaw npm

Revision history

  1. #7

    Referenz(en) aufgenommen: GHSA-3R78-RQG8-95GG, GHSA-W6F4-3V35-QJHJ

  2. #6

    CVE's ergänzt

  3. #5

    CVE's ergänzt

  4. #4

    CVE-Nummern ergänzt

  5. #3

    CVE-2026-22176, CVE-2026-28460, CVE-2026-31992 ergänzt

  6. #2

    CVE's ergänzt

  7. #1

    Initiale Fassung

References