Skip to content
OpenAdvisories
High WID-SEC-2026-0884 13 CVEs

OpenClaw: Mehrere Schwachstellen

Published Mar 26, 2026 · Updated Apr 12, 2026 · Revision 3 · de-DE

Summary

Ein Angreifer kann mehrere Schwachstellen in OpenClaw ausnutzen, um erweiterte Rechte, einschließlich Administratorrechte, zu erlangen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen oder andere, nicht näher spezifizierte Angriffe durchzuführen.

Product

OpenClaw ist ein persönlicher KI-Assistent zur Ausführung auf eigenen Geräten.

Vulnerabilities 13

  • High 8.1
    CVE-2026-34512

    OpenClaw < 2026.3.25 - Improper Access Control in /sessions/:sessionKey/kill Endpoint

    OpenClaw before 2026.3.25 contains an improper access control vulnerability in the HTTP /sessions/:sessionKey/kill route that allows any bearer-authenticated user to invoke admin-level session termination functions without proper scope validation. Attackers c…

    OpenClaw OpenClaw openclaw npm
  • High 8.1
    CVE-2026-35645

    OpenClaw < 2026.3.25 - Privilege Escalation via Synthetic operator.admin in deleteSession

    OpenClaw before 2026.3.25 contains a privilege escalation vulnerability in the gateway plugin subagent fallback deleteSession function that uses a synthetic operator.admin runtime scope. Attackers can exploit this by triggering session deletion without a requ…

    OpenClaw OpenClaw openclaw npm
  • High 7.8
    CVE-2026-35625

    OpenClaw < 2026.3.25 - Privilege Escalation via Silent Local Shared-Auth Reconnect

    OpenClaw before 2026.3.25 contains a privilege escalation vulnerability where silent local shared-auth reconnects auto-approve scope-upgrade requests, widening paired device permissions from operator.read to operator.admin. Attackers can exploit this by trigg…

    OpenClaw OpenClaw openclaw npm
  • High 7.5
    CVE-2026-35650

    OpenClaw < 2026.3.22 - Environment Variable Override Bypass via Inconsistent Sanitization

    OpenClaw before 2026.3.22 contains an environment variable override handling vulnerability that allows attackers to bypass the shared host environment policy through inconsistent sanitization paths. Attackers can supply blocked or malformed override keys that…

    OpenClaw OpenClaw openclaw npm
  • Medium 6.5
    CVE-2026-35657

    OpenClaw < 2026.3.25 - Authorization Bypass in HTTP Session History Route

    OpenClaw before 2026.3.25 contains an authorization bypass vulnerability in the HTTP /sessions/:sessionKey/history route that skips operator.read scope validation. Attackers can access session history without proper operator read permissions by sending HTTP r…

    OpenClaw OpenClaw openclaw npm
  • Medium 5.3
    CVE-2026-35640

    OpenClaw < 2026.3.25 - Denial of Service via Unauthenticated Webhook Request Parsing

    OpenClaw before 2026.3.25 parses JSON request bodies before validating webhook signatures, allowing unauthenticated attackers to force resource-intensive parsing operations. Remote attackers can send malicious webhook requests to trigger denial of service by …

    OpenClaw OpenClaw openclaw npm
  • Medium 5.3
    CVE-2026-35661

    OpenClaw < 2026.3.25 - Telegram DM-Scoped Inline Button Callback Authorization Bypass

    OpenClaw before 2026.3.25 contains an authorization bypass vulnerability in Telegram callback query handling that allows attackers to mutate session state without satisfying normal DM pairing requirements. Remote attackers can exploit weaker callback-only aut…

    OpenClaw OpenClaw openclaw npm
  • Medium 5.3
    CVE-2026-35664

    OpenClaw < 2026.3.25 - DM Pairing Bypass via Legacy Card Callbacks

    OpenClaw before 2026.3.25 contains an authentication bypass vulnerability in raw card send surface that allows unpaired recipients to mint legacy callback payloads. Attackers can send raw card commands to bypass DM pairing restrictions and reach callback hand…

    OpenClaw OpenClaw openclaw npm
  • Medium 4.8
    CVE-2026-35628

    OpenClaw < 2026.3.25 - Brute-Force Attack via Missing Telegram Webhook Rate Limiting

    OpenClaw before 2026.3.25 contains a missing rate limiting vulnerability in Telegram webhook authentication that allows attackers to brute-force weak webhook secrets. The vulnerability enables repeated authentication guesses without throttling, permitting att…

    OpenClaw OpenClaw openclaw npm
  • Medium 4.3
    CVE-2026-35642

    OpenClaw < 2026.3.25 - Authorization Bypass in Group Reactions via requireMention Bypass

    OpenClaw before 2026.3.25 contains an authorization bypass vulnerability where group reaction events bypass the requireMention access control mechanism. Attackers can trigger reactions in mention-gated groups to enqueue agent-visible system events that should…

    OpenClaw OpenClaw openclaw npm
  • Medium 4.3
    CVE-2026-35651

    OpenClaw 2026.2.13 < 2026.3.25 - ANSI Escape Sequence Injection in Approval Prompt

    OpenClaw versions 2026.2.13 through 2026.3.24 contain an ANSI escape sequence injection vulnerability in approval prompts that allows attackers to spoof terminal output. Untrusted tool metadata can carry ANSI control sequences into approval prompts and permis…

    OpenClaw OpenClaw openclaw npm
  • Medium 4.3
    CVE-2026-35662

    OpenClaw < 2026.3.22 - Missing controlScope Enforcement in Send Action

    OpenClaw before 2026.3.22 fails to enforce controlScope restrictions on the send action, allowing leaf subagents to message controlled child sessions beyond their authorized scope. Attackers can exploit this by using the send action to communicate with child …

    OpenClaw OpenClaw openclaw npm
  • Medium 4.2
    CVE-2026-35617

    OpenClaw < 2026.3.25 - Authorization Bypass via Group Policy Rebinding with Mutable Space displayName

    OpenClaw before 2026.3.25 contains an authorization bypass vulnerability in Google Chat group policy enforcement that relies on mutable space display names. Attackers can rebind group policies by changing or colliding space display names to gain unauthorized …

    OpenClaw OpenClaw openclaw npm

Revision history

  1. #3

    CVE-Nummern ergänzt

  2. #2

    CVE-Nummern ergänzt

  3. #1

    Initiale Fassung

References