Skip to content
OpenAdvisories
High WID-SEC-2026-0727 11 CVEs

OpenClaw: Mehrere Schwachstellen

Published Mar 15, 2026 · Updated Mar 31, 2026 · Revision 4 · de-DE

Summary

Ein Angreifer kann mehrere Schwachstellen in OpenClaw ausnutzen, um beliebigen Code auszuführen, erweiterte Berechtigungen – sogar Administratorrechte – zu erlangen, Daten zu manipulieren, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen oder andere, nicht näher spezifizierte Angriffe durchzuführen.

Product

OpenClaw ist ein persönlicher KI-Assistent zur Ausführung auf eigenen Geräten.

Vulnerabilities 11

  • Critical 9.9
    CVE-2026-22172

    OpenClaw < 2026.3.12 - Scope Elevation in WebSocket Shared-Auth Connections

    OpenClaw versions prior to 2026.3.12 contain an authorization bypass vulnerability in the WebSocket connect path that allows shared-token or password-authenticated connections to self-declare elevated scopes without server-side binding. Attackers can exploit …

    OpenClaw OpenClaw openclaw npm
  • Critical 9.8
    CVE-2026-32917

    OpenClaw < 2026.3.13 - Remote Command Injection via Unsanitized iMessage Attachment Paths in SCP

    OpenClaw before 2026.3.13 contains a remote command injection vulnerability in the iMessage attachment staging flow that allows attackers to execute arbitrary commands on configured remote hosts. The vulnerability exists because unsanitized remote attachment …

    OpenClaw OpenClaw openclaw npm
  • High 8.8
    CVE-2026-32914

    OpenClaw < 2026.3.12 - Insufficient Access Control in /config and /debug Endpoints

    OpenClaw before 2026.3.12 contains an insufficient access control vulnerability in the /config and /debug command handlers that allows command-authorized non-owners to access owner-only surfaces. Attackers with command authorization can read or modify privile…

    OpenClaw OpenClaw openclaw npm
  • High 8.8
    CVE-2026-32915

    OpenClaw < 2026.3.11 - Sandbox Boundary Bypass via Subagent Control Surface

    OpenClaw before 2026.3.11 contains a sandbox boundary bypass vulnerability allowing leaf subagents to access the subagents control surface and resolve against parent requester scope instead of their own session tree. A low-privilege sandboxed leaf worker can …

    OpenClaw OpenClaw openclaw npm
  • High 8.8
    CVE-2026-33573

    OpenClaw < 2026.3.11 - Workspace Boundary Bypass via Agent RPC Parameters

    OpenClaw before 2026.3.11 contains an authorization bypass vulnerability in the gateway agent RPC that allows authenticated operators with operator.write permission to override workspace boundaries by supplying attacker-controlled spawnedBy and workspaceDir v…

    OpenClaw OpenClaw openclaw npm
  • High 8.6
    CVE-2026-32974

    OpenClaw < 2026.3.12 - Forged Event Injection via Feishu Webhook Verification Token

    OpenClaw before 2026.3.12 contains an authentication bypass vulnerability in Feishu webhook mode when only verificationToken is configured without encryptKey, allowing acceptance of forged events. Unauthenticated network attackers can inject forged Feishu eve…

    OpenClaw OpenClaw openclaw npm
  • High 8.4
    CVE-2026-33572

    OpenClaw < 2026.2.17 - Insufficient File Permissions in Session Transcript Files

    OpenClaw before 2026.2.17 creates session transcript JSONL files with overly broad default permissions, allowing local users to read transcript contents. Attackers with local access can read transcript files to extract sensitive information including secrets …

    OpenClaw OpenClaw openclaw npm
  • High 7.5
    CVE-2026-32980

    OpenClaw < 2026.3.13 - Resource Exhaustion via Unauthenticated Telegram Webhook Request

    OpenClaw before 2026.3.13 reads and buffers Telegram webhook request bodies before validating the x-telegram-bot-api-secret-token header, allowing unauthenticated attackers to exhaust server resources. Attackers can send POST requests to the webhook endpoint …

    OpenClaw OpenClaw openclaw npm
  • High 7.5
    CVE-2026-32988

    OpenClaw < 2026.3.11 - Sandbox Boundary Bypass via Unvalidated Temporary File Creation

    OpenClaw before 2026.3.11 contains a sandbox boundary bypass vulnerability in fs-bridge staged writes where temporary file creation and population are not pinned to a verified parent directory. Attackers can exploit a race condition in parent-path alias chang…

    OpenClaw OpenClaw openclaw npm
  • High 7.1
    CVE-2026-32971

    OpenClaw < 2026.3.11 - Node-Host Approval UI Mismatch Allows Execution of Unintended Commands

    OpenClaw before 2026.3.11 contains an approval-integrity vulnerability in node-host system.run approvals that displays extracted shell payloads instead of the executed argv. Attackers can place wrapper binaries and induce wrapper-shaped commands to execute lo…

    OpenClaw OpenClaw openclaw npm
  • High 7.1
    CVE-2026-32972

    OpenClaw < 2026.3.11 - Authorization Bypass in Browser Profile Management via browser.request

    OpenClaw before 2026.3.11 contains an authorization bypass vulnerability allowing authenticated operators with only operator.write permission to access admin-only browser profile management routes through browser.request. Attackers can create or modify browse…

    OpenClaw OpenClaw openclaw npm

Revision history

  1. #4

    CVE's ergänzt

  2. #3

    CVE-Nummern ergänzt

  3. #2

    CVE ergänzt

  4. #1

    Initiale Fassung

References