Skip to content
OpenAdvisories
Medium WID-SEC-2026-0980 21 CVEs

OpenClaw: Mehrere Schwachstellen

Published Apr 6, 2026 · Updated Apr 28, 2026 · Revision 5 · de-DE

Platform: Linux

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in OpenClaw ausnutzen, um Daten zu manipulieren, Sicherheitsmechanismen zu umgehen oder einen Denial-of-Service-Zustand zu erzeugen..

Product

OpenClaw ist ein persönlicher KI-Assistent zur Ausführung auf eigenen Geräten.

Vulnerabilities 21

  • High 8.8
    CVE-2026-41352

    OpenClaw < 2026.3.31 - Remote Code Execution via Node Scope Gate Bypass

    OpenClaw before 2026.3.31 contains a remote code execution vulnerability where a device-paired node can bypass the node scope gate authentication mechanism. Attackers with device pairing credentials can execute arbitrary node commands on the host system witho…

    OpenClaw OpenClaw openclaw npm
  • High 8.1
    CVE-2026-41383

    OpenClaw < 2026.4.2 - Arbitrary Remote Directory Deletion via Mis-scoped Mirror Mode Paths

    OpenClaw before 2026.4.2 contains an arbitrary directory deletion vulnerability in mirror mode that allows attackers to delete remote directories by influencing remoteWorkspaceDir and remoteAgentWorkspaceDir configuration values. Attackers can manipulate thes…

    OpenClaw OpenClaw openclaw npm
  • High 7.8
    CVE-2026-41295

    OpenClaw < 2026.4.2 - Untrusted Workspace Channel Shadow Code Execution during Built-in Channel Setup

    OpenClaw before 2026.4.2 contains an improper trust boundary vulnerability allowing untrusted workspace channel shadows to execute during built-in channel setup and login. Attackers can clone a workspace with a malicious plugin claiming a bundled channel id t…

    OpenClaw OpenClaw openclaw npm
  • High 7.6
    CVE-2026-34426

    OpenClaw - Approval Bypass via Environment Variable Normalization

    OpenClaw versions prior to commit b57b680 contain an approval bypass vulnerability due to inconsistent environment variable normalization between approval and execution paths, allowing attackers to inject attacker-controlled environment variables into executi…

    OpenClaw OpenClaw openclaw npm
  • Medium 6.7
    CVE-2026-41360

    OpenClaw < 2026.4.2 - Approval Integrity Bypass in pnpm dlx Local Script Binding

    OpenClaw before 2026.4.2 contains an approval integrity vulnerability in pnpm dlx that fails to bind local script operands consistently with pnpm exec flows. Attackers can replace approved local scripts before execution without invalidating the approval plan,…

    OpenClaw OpenClaw openclaw npm
  • Medium 6.5
    CVE-2026-41388

    OpenClaw < 2026.3.31 - Configuration Rehydration via Empty-Array Revocation Handling

    OpenClaw before 2026.3.31 contains a configuration management vulnerability where startup migration treats empty-array settings as missing values. Attackers can restart the application to rehydrate revoked Tlon configuration from file state, bypassing intende…

    OpenClaw OpenClaw openclaw npm
  • Medium 5.8
    CVE-2026-41372

    OpenClaw < 2026.4.2 - Loopback Protection Bypass via Trailing-Dot Localhost in CDP Discovery

    OpenClaw before 2026.4.2 fails to normalize trailing-dot localhost hosts in remote CDP discovery responses, allowing bypass of loopback protections. Attackers can craft hostile discovery responses returning localhost. to retarget authenticated browser control…

    OpenClaw OpenClaw openclaw npm
  • Medium 5.4
    CVE-2026-34425

    OpenClaw - Shell-Bleed Protection Preflight Validation Bypass

    OpenClaw versions prior to commit 8aceaf5 contain a preflight validation bypass vulnerability in shell-bleed protection that allows attackers to execute blocked script content by using piped or complex command forms that the parser fails to recognize. Attacke…

    OpenClaw OpenClaw openclaw npm
  • Medium 5.4
    CVE-2026-41298

    OpenClaw < 2026.4.2 - Authorization Bypass in Session Termination Endpoint

    OpenClaw before 2026.4.2 fails to enforce write scopes on the POST /sessions/:sessionKey/kill endpoint in identity-bearing HTTP modes. Read-scoped callers can terminate running subagent sessions by sending requests to this endpoint, bypassing authorization co…

    OpenClaw OpenClaw openclaw npm
  • Medium 5.4
    CVE-2026-41348

    OpenClaw < 2026.3.31 - Group DM Channel Allowlist Bypass via Discord Slash Commands

    OpenClaw before 2026.3.31 contains an authorization bypass vulnerability in Discord slash command and autocomplete paths that fail to enforce group DM channel allowlist restrictions. Authorized Discord users can bypass channel restrictions by invoking slash c…

    OpenClaw OpenClaw openclaw npm
  • Medium 5.4
    CVE-2026-41358

    OpenClaw < 2026.4.2 - Sender Allowlist Bypass via Slack Thread Context

    OpenClaw before 2026.4.2 fails to filter Slack thread context by sender allowlist, allowing non-allowlisted messages to enter agent context. Attackers can inject unauthorized thread messages through allowlisted user replies to bypass sender access controls an…

    OpenClaw OpenClaw openclaw npm
  • Medium 5.3
    CVE-2026-34511

    OpenClaw < 2026.4.2 - PKCE Verifier Exposure via OAuth State Parameter

    OpenClaw before 2026.4.2 reuses the PKCE verifier as the OAuth state parameter in the Gemini OAuth flow, exposing it through the redirect URL. Attackers who capture the redirect URL can obtain both the authorization code and PKCE verifier, defeating PKCE prot…

    OpenClaw OpenClaw openclaw npm
  • Medium 5.3
    CVE-2026-41301

    OpenClaw 2026.3.22 < 2026.3.31 - Forged Nostr DM Pairing State Creation via Signature Verification Bypass

    OpenClaw versions 2026.3.22 before 2026.3.31 contain a signature verification bypass vulnerability in the Nostr DM ingress path that allows pairing challenges to be issued before event signature validation. An unauthenticated remote attacker can send forged d…

    OpenClaw OpenClaw openclaw npm
  • Medium 5.3
    CVE-2026-41346

    OpenClaw 2026.2.26 < 2026.3.31 - Denial of Service via Improper Pending Pairing Request Cap Enforcement

    OpenClaw 2026.2.26 before 2026.3.31 enforces pending pairing-request caps per channel file instead of per account, allowing attackers to exhaust the shared pending window. Remote attackers can submit pairing requests from other accounts to block new pairing c…

    OpenClaw OpenClaw openclaw npm
  • Medium 5.3
    CVE-2026-41351

    OpenClaw < 2026.3.31 - Webhook Replay Detection Bypass via Base64 Signature Re-encoding

    OpenClaw before 2026.3.31 contains a replay detection bypass vulnerability in webhook signature handling that treats Base64 and Base64URL encoded signatures as distinct requests. Attackers can re-encode Telnyx webhook signatures to bypass replay detection whi…

    OpenClaw OpenClaw openclaw npm
  • Medium 5.3
    CVE-2026-41400

    OpenClaw < 2026.3.31 - Resource Consumption via Oversized WebSocket Frames in voice-call

    OpenClaw before 2026.3.31 contains an incomplete fix for CVE-2026-32062 where the voice-call component parses large WebSocket frames before start validation. Remote attackers can send oversized pre-start WebSocket frames to cause resource consumption and deni…

    OpenClaw OpenClaw openclaw npm
  • Medium 4.6
    CVE-2026-41398

    OpenClaw - Unauthorized Agent Request Dispatch via Untrusted Local-Network Pages in iOS A2UI Bridge

    OpenClaw before 2026.4.2 contains an improper access control vulnerability in the iOS A2UI bridge that treats generic local-network pages as trusted origins. Attackers can inject unauthorized agent.request runs by loading attacker-controlled pages from local-…

    OpenClaw OpenClaw openclaw npm
  • Medium 4.3
    CVE-2026-41339

    OpenClaw < 2026.4.2 - Information Disclosure via Gateway Connect Snapshot

    OpenClaw before 2026.4.2 exposes configPath and stateDir metadata in Gateway connect success snapshots to non-admin authenticated clients. Non-admin clients can recover host-specific filesystem paths and deployment details, enabling host fingerprinting and fa…

    OpenClaw OpenClaw openclaw npm
  • Medium 4.3
    CVE-2026-41362

    OpenClaw 2026.2.19 through 2026.3.30 - Webhook Replay Dedupe Cache Event Suppression via Shared Authentication

    OpenClaw versions 2026.2.19 before 2026.3.31 contain an improper cache isolation vulnerability in the Zalo webhook replay-dedupe mechanism that is shared across authenticated webhook targets. Attackers controlling one authenticated Zalo webhook path in multi-…

    OpenClaw OpenClaw openclaw npm
  • Low 3.7
    CVE-2026-41354

    OpenClaw < 2026.4.2 - Insufficient Scope in Zalo Webhook Replay Dedupe Keys

    OpenClaw before 2026.4.2 contains an insufficient scope vulnerability in Zalo webhook replay dedupe keys that allows legitimate events from different conversations or senders to collide. Attackers can exploit weak deduplication scoping to cause silent message…

    OpenClaw OpenClaw openclaw npm
  • Low 3.7
    CVE-2026-41407

    OpenClaw < 2026.4.2 - Timing Side Channel in Shared-Secret Comparison

    OpenClaw before 2026.4.2 contains a timing side channel vulnerability in shared-secret comparison call sites that use early length-mismatch checks instead of fixed-length comparison helpers. Attackers can measure timing differences to leak secret-length infor…

    OpenClaw OpenClaw openclaw npm

Revision history

  1. #5

    CVE-Nummern ergänzt

  2. #4

    Referenzen ergänzt

  3. #3

    CVE-Nummern ergänzt

  4. #2

    CVE's ergänzt

  5. #1

    Initiale Fassung

References