Skip to content
OpenAdvisories
High WID-SEC-2026-0930 18 CVEs

OpenClaw: Mehrere Schwachstellen

Published Mar 30, 2026 · Updated Apr 28, 2026 · Revision 6 · de-DE

Summary

Ein Angreifer kann mehrere Schwachstellen in OpenClaw ausnutzen, um erweiterte Rechte zu erlangen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen oder andere, nicht näher spezifizierte Angriffe durchzuführen.

Product

OpenClaw ist ein persönlicher KI-Assistent zur Ausführung auf eigenen Geräten.

Vulnerabilities 18

  • Critical 9.9
    CVE-2026-33579 Public exploit

    OpenClaw < 2026.3.28 - Privilege Escalation via Missing Caller Scope Validation in Device Pair Approval

    OpenClaw before 2026.3.28 contains a privilege escalation vulnerability in the /pair approve command path that fails to forward caller scopes into the core approval check. A caller with pairing privileges but without admin privileges can approve pending devic…

    OpenClaw OpenClaw openclaw npm
  • High 8.8
    CVE-2026-41303 Public exploit

    OpenClaw < 2026.3.28 - Authorization Bypass in Discord Text Approval Commands

    OpenClaw before 2026.3.28 contains an authorization bypass vulnerability in Discord text approval commands that allows non-approvers to resolve pending exec approvals. Attackers can send Discord text commands to bypass the channels.discord.execApprovals.appro…

    OpenClaw OpenClaw openclaw npm
  • High 8.5
    CVE-2026-41371

    OpenClaw < 2026.3.28 - Privilege Escalation via chat.send Reset Command

    OpenClaw before 2026.3.28 contains a privilege escalation vulnerability in chat.send that allows write-scoped gateway callers to trigger admin-only session reset operations. Attackers can rotate target sessions, archive prior transcript state, and force new s…

    OpenClaw OpenClaw openclaw npm
  • High 8.3
    CVE-2026-34504

    OpenClaw < 2026.3.28 - Server-Side Request Forgery via Unguarded Image Download in fal Provider

    OpenClaw before 2026.3.28 contains a server-side request forgery vulnerability in the fal provider image-generation-provider.ts component that allows attackers to fetch internal URLs. A malicious or compromised fal relay can exploit unguarded image download f…

    OpenClaw OpenClaw openclaw npm
  • High 8.1
    CVE-2026-33577

    OpenClaw < 2026.3.28 - Insufficient Scope Validation in node.pair.approve

    OpenClaw before 2026.3.28 contains an insufficient scope validation vulnerability in the node pairing approval path that allows low-privilege operators to approve nodes with broader scopes. Attackers can exploit missing callerScopes validation in node-pairing…

    OpenClaw OpenClaw openclaw npm
  • High 8.1
    CVE-2026-34503

    OpenClaw < 2026.3.28 - Incomplete WebSocket Session Termination on Device Removal and Token Revocation

    OpenClaw before 2026.3.28 fails to disconnect active WebSocket sessions when devices are removed or tokens are revoked. Attackers with revoked credentials can maintain unauthorized access through existing live sessions until forced reconnection.

    OpenClaw OpenClaw openclaw npm
  • High 7.5
    CVE-2026-41395

    OpenClaw < 2026.3.28 - Webhook Replay via Query Parameter Reordering in Plivo V3

    OpenClaw before 2026.3.28 contains a webhook replay vulnerability in Plivo V3 signature verification that canonicalizes query ordering for signatures but hashes raw URLs for replay detection. Attackers can reorder query parameters to bypass replay cache detec…

    OpenClaw OpenClaw openclaw npm
  • High 7.3
    CVE-2026-41342

    OpenClaw < 2026.3.28 - Unauthenticated Discovery Endpoint Credential Exfiltration via Remote Onboarding

    OpenClaw before 2026.3.28 contains an authentication bypass vulnerability in the remote onboarding component that persists unauthenticated discovery endpoints without explicit trust confirmation. Attackers can spoof discovery endpoints to redirect onboarding …

    OpenClaw OpenClaw openclaw npm
  • High 7.3
    CVE-2026-41380

    OpenClaw < 2026.3.28 - Arbitrary Execution Allowlist via Wrapper Carrier Executables

    OpenClaw before 2026.3.28 contains an execution approval vulnerability in exec-approvals-allowlist.ts that allows allow-always persistence to trust wrapper carrier executables instead of invoked targets. Attackers can exploit positional carrier executable rou…

    OpenClaw OpenClaw openclaw npm
  • High 7.1
    CVE-2026-41361

    OpenClaw < 2026.3.28 - SSRF Guard Bypass via IPv6 Special-Use Ranges

    OpenClaw before 2026.3.28 contains an SSRF guard bypass vulnerability that fails to block four IPv6 special-use ranges. Attackers can exploit this by crafting URLs targeting internal or non-routable IPv6 addresses to bypass SSRF protections.

    OpenClaw OpenClaw openclaw npm
  • Medium 6.5
    CVE-2026-33576

    OpenClaw < 2026.3.28 - Unauthorized Media Download via Zalo Channel

    OpenClaw before 2026.3.28 downloads and stores inbound media from Zalo channels before validating sender authorization. Unauthorized senders can force network fetches and disk writes to the media store by sending messages that are subsequently rejected.

    OpenClaw OpenClaw openclaw npm
  • Medium 6.5
    CVE-2026-33580

    OpenClaw < 2026.3.28 - Brute Force Attack via Missing Rate Limiting on Webhook Shared Secret Authentication

    OpenClaw before 2026.3.28 contains a missing rate limiting vulnerability in the Nextcloud Talk webhook authentication that allows attackers to brute-force weak shared secrets. Attackers who can reach the webhook endpoint can exploit this to forge inbound webh…

    OpenClaw OpenClaw openclaw npm
  • Medium 6.5
    CVE-2026-33581

    OpenClaw < 2026.3.24 - Arbitrary File Read via mediaUrl and fileUrl Parameters

    OpenClaw before 2026.3.24 contains a sandbox bypass vulnerability in the message tool that allows attackers to read arbitrary local files by using mediaUrl and fileUrl alias parameters that bypass localRoots validation. Remote attackers can exploit this by ro…

    OpenClaw OpenClaw openclaw npm
  • Medium 6.5
    CVE-2026-41368

    OpenClaw < 2026.3.28 - Environment Variable Disclosure via jq $ENV Filter Bypass

    OpenClaw before 2026.3.28 contains an environment variable disclosure vulnerability in the jq safe-bin policy that fails to block the $ENV filter. Attackers can bypass safe-bin restrictions by using $ENV in jq programs to access sensitive environment variable…

    OpenClaw OpenClaw openclaw npm
  • Medium 5.4
    CVE-2026-41344

    OpenClaw < 2026.3.28 - Privilege Escalation via chat.send /verbose Parameter

    OpenClaw before 2026.3.28 contains a privilege escalation vulnerability in the chat.send endpoint that allows write-scoped gateway callers to persist admin-only verboseLevel session overrides. Attackers can exploit the /verbose parameter to bypass access cont…

    OpenClaw OpenClaw openclaw npm
  • Medium 5.3
    CVE-2026-41332

    OpenClaw < 2026.3.28 - Code Execution via Missing Environment Variable Blocklist

    OpenClaw before 2026.3.28 contains an environment variable sanitization vulnerability where GIT_TEMPLATE_DIR and AWS_CONFIG_FILE are not blocked in the host-env blocklist. Attackers can exploit approved exec requests to redirect git or AWS CLI behavior throug…

    OpenClaw OpenClaw openclaw npm
  • Medium 5.0
    CVE-2026-41367

    OpenClaw 2026.2.14 < 2026.3.28 - Policy Enforcement Bypass in Discord Component Interactions

    OpenClaw versions 2026.2.14 through 2026.3.24 fail to consistently apply guild and channel policy gates to Discord button and component interactions. Attackers can trigger privileged component actions from blocked contexts by bypassing channel policy enforcem…

    OpenClaw OpenClaw openclaw npm
  • Medium 4.3
    CVE-2026-33578

    OpenClaw < 2026.3.28 - Sender Policy Allowlist Bypass via Policy Downgrade in Google Chat and Zalouser Extensions

    OpenClaw before 2026.3.28 contains a sender policy bypass vulnerability in the Google Chat and Zalouser extensions where route-level group allowlist policies silently downgrade to open policy. Attackers can exploit this policy resolution flaw to bypass sender…

    OpenClaw OpenClaw openclaw npm

Revision history

  1. #6

    CVE-Nummern ergänzt

  2. #5

    Referenzen ergänzt

  3. #4

    CVE-Nummern ergänzt

  4. #3

    CVE ergänzt

  5. #2

    CVE-Nummern ergänzt

  6. #1

    Initiale Fassung

References