Skip to content
OpenAdvisories
High WID-SEC-2026-0711 20 CVEs

OpenClaw: Mehrere Schwachstellen

Published Mar 12, 2026 · Updated Mar 31, 2026 · Revision 6 · de-DE

Platform: Linux Platform: macOS Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in OpenClaw ausnutzen, um Administratorrechte zu erlangen, beliebigen Code auszuführen, Daten zu manipulieren, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen oder andere nicht näher spezifizierte Angriffe durchzuführen.

Product

OpenClaw ist ein persönlicher KI-Assistent zur Ausführung auf eigenen Geräten.

Vulnerabilities 20

  • Critical 9.9
    CVE-2026-32922

    OpenClaw < 2026.3.11 - Privilege Escalation via Unvalidated Scope in device.token.rotate

    OpenClaw before 2026.3.11 contains a privilege escalation vulnerability in device.token.rotate that allows callers with operator.pairing scope to mint tokens with broader scopes by failing to constrain newly minted scopes to the caller's current scope set. At…

    OpenClaw OpenClaw openclaw npm
  • Critical 9.8
    CVE-2026-32924

    OpenClaw < 2026.3.12 - Authorization Bypass via Misclassified Reaction Events in Feishu

    OpenClaw before 2026.3.12 contains an authorization bypass vulnerability where Feishu reaction events with omitted chat_type are misclassified as p2p conversations instead of group chats. Attackers can exploit this misclassification to bypass groupAllowFrom a…

    OpenClaw OpenClaw openclaw npm
  • Critical 9.8
    CVE-2026-32973

    OpenClaw < 2026.3.11 - Exec Allowlist Pattern Overmatch via POSIX Path Normalization

    OpenClaw before 2026.3.11 contains an exec allowlist bypass vulnerability where matchesExecAllowlistPattern improperly normalizes patterns with lowercasing and glob matching that overmatches on POSIX paths. Attackers can exploit the ? wildcard matching across…

    OpenClaw OpenClaw openclaw npm
  • Critical 9.8
    CVE-2026-32975

    OpenClaw < 2026.3.12 - Weak Authorization via Mutable Group Names in Zalouser Allowlist

    OpenClaw before 2026.3.12 contains a weak authorization vulnerability in Zalouser allowlist mode that matches mutable group display names instead of stable group identifiers. Attackers can create groups with identical names to allowlisted groups to bypass cha…

    OpenClaw OpenClaw openclaw npm
  • Critical 9.4
    CVE-2026-32916

    OpenClaw 2026.3.7 < 2026.3.11 - Authorization Bypass in Plugin Subagent Routes via Synthetic Admin Scopes

    OpenClaw versions 2026.3.7 before 2026.3.11 contain an authorization bypass vulnerability where plugin subagent routes execute gateway methods through a synthetic operator client with broad administrative scopes. Remote unauthenticated requests to plugin-owne…

    OpenClaw OpenClaw openclaw npm
  • High 8.4
    CVE-2026-32918

    OpenClaw < 2026.3.11 - Session Sandbox Escape via session_status Tool

    OpenClaw before 2026.3.11 contains a session sandbox escape vulnerability in the session_status tool that allows sandboxed subagents to access parent or sibling session state. Attackers can supply arbitrary sessionKey values to read or modify session data out…

    OpenClaw OpenClaw openclaw npm
  • High 8.4
    CVE-2026-32920

    OpenClaw < 2026.3.12 - Arbitrary Code Execution via Auto-Discovery of Workspace Plugins

    OpenClaw before 2026.3.12 automatically discovers and loads plugins from .OpenClaw/extensions/ without explicit trust verification, allowing arbitrary code execution. Attackers can execute malicious code by including crafted workspace plugins in cloned reposi…

    OpenClaw OpenClaw openclaw npm
  • High 8.1
    CVE-2026-32302

    OpenClaw: Untrusted web origins can obtain authenticated operator.admin access in trusted-proxy mode

    OpenClaw is a personal AI assistant. Prior to 2026.3.11, browser-originated WebSocket connections could bypass origin validation when gateway.auth.mode was set to trusted-proxy and the request arrived with proxy headers. A page served from an untrusted origin…

    OpenClaw OpenClaw openclaw npm
  • High 8.0
    CVE-2026-32978

    OpenClaw < 2026.3.11 - Approval Bypass via Unrecognized Script Runners

    OpenClaw before 2026.3.11 contains an approval integrity vulnerability where system.run approvals fail to bind mutable file operands for certain script runners like tsx and jiti. Attackers can obtain approval for benign script commands, rewrite referenced scr…

    OpenClaw OpenClaw openclaw npm
  • High 7.6
    CVE-2026-32055

    OpenClaw < 2026.2.26 - Workspace Path Boundary Bypass via Non-existent Symlink

    OpenClaw versions prior to 2026.2.26 contain a path traversal vulnerability in workspace boundary validation that allows attackers to write files outside the workspace through in-workspace symlinks pointing to non-existent out-of-root targets. The vulnerabili…

    OpenClaw OpenClaw openclaw npm
  • High 7.5
    CVE-2026-33575

    OpenClaw < 2026.3.12 - Long-lived Credential Exposure in Pairing Setup Codes

    OpenClaw before 2026.3.12 embeds long-lived shared gateway credentials directly in pairing setup codes generated by /pair endpoint and OpenClaw qr command. Attackers with access to leaked setup codes from chat history, logs, or screenshots can recover and reu…

    OpenClaw OpenClaw openclaw npm
  • High 7.3
    CVE-2026-32979

    OpenClaw < 2026.3.11 - Unbound Interpreter and Runtime Commands Bypass in node-host Approval

    OpenClaw before 2026.3.11 contains an approval integrity vulnerability allowing attackers to execute rewritten local code by modifying scripts between approval and execution when exact file binding cannot occur. Remote attackers can change approved local scri…

    OpenClaw OpenClaw openclaw npm
  • Medium 6.5
    CVE-2026-32976

    OpenClaw < 2026.3.11 - Account-Scoped configWrites Policy Bypass via Channel Commands

    OpenClaw before 2026.3.11 contains an authorization bypass vulnerability allowing channel commands to mutate protected sibling-account configuration despite configWrites restrictions. Attackers with authorized access on one account can execute channel command…

    OpenClaw OpenClaw openclaw npm
  • Medium 6.5
    CVE-2026-34505

    OpenClaw < 2026.3.12 - Webhook Rate Limiting Bypass via Pre-Authentication Secret Validation

    OpenClaw before 2026.3.12 applies rate limiting only after successful webhook authentication, allowing attackers to bypass rate limits and brute-force webhook secrets. Attackers can submit repeated authentication requests with invalid secrets without triggeri…

    OpenClaw OpenClaw openclaw npm
  • Medium 6.3
    CVE-2026-32977

    OpenClaw < 2026.3.11 - Sandbox Boundary Bypass via Unanchored writeFile Commit Path

    OpenClaw before 2026.3.11 contains a sandbox boundary bypass vulnerability in the fs-bridge writeFile commit step that uses an unanchored container path during the final move operation. An attacker can exploit a time-of-check-time-of-use race condition by mod…

    OpenClaw OpenClaw openclaw npm
  • Medium 6.3
    CVE-2026-34508 Rejected

    This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

  • Medium 6.1
    CVE-2026-32919

    OpenClaw < 2026.3.11 - Unauthorized Session Reset via agent Slash Commands

    OpenClaw before 2026.3.11 contains an authorization bypass vulnerability allowing write-scoped callers to reach admin-only session reset logic. Attackers with operator.write scope can issue agent requests containing /new or /reset slash commands to reset targ…

    OpenClaw OpenClaw openclaw npm
  • Medium 5.4
    CVE-2026-32923

    OpenClaw < 2026.3.11 - Authorization Bypass in Discord Guild Reaction Allowlist Enforcement

    OpenClaw before 2026.3.11 contains an authorization bypass vulnerability in Discord guild reaction ingestion that fails to enforce member users and roles allowlist checks. Non-allowlisted guild members can trigger reaction events accepted as trusted system ev…

    OpenClaw OpenClaw openclaw npm
  • Medium 4.8
    CVE-2026-32031

    OpenClaw < 2026.2.26 - Authentication Bypass via Path Canonicalization Mismatch in /api/channels Gateway

    OpenClaw versions prior to 2026.2.26 server-http contains an authentication bypass vulnerability in gateway authentication for plugin channel endpoints due to path canonicalization mismatch between the gateway guard and plugin handler routing. Attackers can b…

    OpenClaw OpenClaw openclaw npm
  • Low 2.5
    CVE-2026-32970

    OpenClaw < 2026.3.11 - Credential Fallback Logic Bypass via Unavailable Local Auth SecretRefs

    OpenClaw before 2026.3.11 contains a credential fallback vulnerability where unavailable local gateway.auth.token and gateway.auth.password SecretRefs are treated as unset, allowing fallback to remote credentials in local mode. Attackers can exploit misconfig…

    OpenClaw OpenClaw openclaw npm

Revision history

  1. #6

    CVE's ergänzt

  2. #5

    CVE-Nummern ergänzt

  3. #4

    Referenz(en) aufgenommen: GHSA-9F79-7PW8-3FJ8

  4. #3

    CVE ergänzt

  5. #2

    CVE-2026-32031 ergänzt

  6. #1

    Initiale Fassung

References