Skip to content
OpenAdvisories
High WID-SEC-2026-1005 20 CVEs

OpenClaw: Mehrere Schwachstellen

Published Apr 7, 2026 · Updated Apr 28, 2026 · Revision 3 · de-DE

Platform: Linux

Summary

Ein Angreifer kann mehrere Schwachstellen in OpenClaw ausnutzen, um erweiterte Privilegien zu erlangen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten offenzulegen oder zu manipulieren oder andere, nicht näher spezifizierte Angriffe durchzuführen.

Product

OpenClaw ist ein persönlicher KI-Assistent zur Ausführung auf eigenen Geräten.

Vulnerabilities 20

  • High 8.8
    CVE-2026-42422

    OpenClaw < 2026.4.8 - Role Bypass in device.token.rotate Function

    OpenClaw before 2026.4.8 contains a role bypass vulnerability in the device.token.rotate function that allows minting tokens for unapproved roles. Attackers can bypass device role-upgrade pairing to preserve or mint roles and scopes that had not undergone int…

    OpenClaw OpenClaw openclaw npm
  • High 8.8
    CVE-2026-42426

    OpenClaw < 2026.4.8 - Improper Authorization in node.pair.approve via operator.write Scope

    OpenClaw before 2026.4.8 contains an improper authorization vulnerability where the node.pair.approve method accepts operator.write scope instead of the narrower operator.pairing scope, allowing unprivileged users to approve node pairing. Attackers with opera…

    OpenClaw OpenClaw openclaw npm
  • High 8.1
    CVE-2026-42431

    OpenClaw < 2026.4.8 - Persistent Profile Mutation via node.invoke(browser.proxy) Bypass

    OpenClaw before 2026.4.8 contains a security bypass vulnerability in node.invoke(browser.proxy) that allows mutation of persistent browser profiles. Attackers can exploit this path to circumvent the browser.request persistent profile-mutation guard and modify…

    OpenClaw OpenClaw openclaw npm
  • High 7.8
    CVE-2026-41384

    OpenClaw < 2026.3.24 - Environment Variable Injection via Workspace Config in CLI Backend

    OpenClaw before 2026.3.24 contains an environment variable injection vulnerability in the CLI backend runner that allows attackers to inject malicious environment variables through workspace configuration. Attackers can craft malicious workspace configs to in…

    OpenClaw OpenClaw openclaw npm
  • High 7.8
    CVE-2026-42432

    OpenClaw < 2026.4.8 - Command Escalation via Node Pairing Reconnect Bypass

    OpenClaw before 2026.4.8 contains a privilege escalation vulnerability allowing previously paired nodes to reconnect with exec-capable commands without the operator.admin scope requirement. Attackers can bypass re-pairing authentication to execute privileged …

    OpenClaw OpenClaw openclaw npm
  • High 7.6
    CVE-2026-41912

    OpenClaw < 2026.4.8 - Server-Side Request Forgery Policy Bypass via Interaction-Triggered Navigation

    OpenClaw before 2026.4.8 contains a server-side request forgery policy bypass vulnerability allowing attackers to trigger navigations bypassing normal SSRF checks. Attackers can exploit browser interactions to bypass SSRF protections and access restricted res…

    OpenClaw OpenClaw openclaw npm
  • High 7.5
    CVE-2026-42423

    OpenClaw < 2026.4.8 - strictInlineEval Approval Boundary Bypass via Approval-Timeout Fallback

    OpenClaw before 2026.4.8 contains an approval-timeout fallback mechanism that bypasses strictInlineEval explicit-approval requirements on gateway and node exec hosts. Attackers can exploit this timeout fallback to execute inline eval commands that should requ…

    OpenClaw OpenClaw openclaw npm
  • High 7.1
    CVE-2026-42428

    OpenClaw < 2026.4.8 - Missing Integrity Verification in Package Downloads

    OpenClaw versions before 2026.4.8 fail to enforce integrity verification on downloaded plugin archives. Attackers can install malicious or tampered plugin packages without detection, compromising the local assistant environment.

    OpenClaw OpenClaw openclaw npm
  • Medium 6.7
    CVE-2026-41392

    OpenClaw < 2026.3.31 - Exec Allowlist Bypass via Shell Init-File Options

    OpenClaw before 2026.3.31 contains an exec allowlist bypass vulnerability allowing attackers to inherit allowlist trust via shell init-file wrapper invocations. Attackers can exploit shell options like --rcfile, --init-file, and --startup-file to load attacke…

    OpenClaw OpenClaw openclaw npm
  • Medium 6.5
    CVE-2026-42430

    OpenClaw < 2026.4.8 - Strict Browser SSRF Bypass via Playwright Redirect Handling

    OpenClaw before 2026.4.8 contains a server-side request forgery vulnerability in Playwright redirect handling that allows attackers to bypass strict SSRF checks. Attackers can exploit request-time navigation to reach private targets that should be restricted …

    OpenClaw OpenClaw openclaw npm
  • Medium 5.7
    CVE-2026-40045

    OpenClaw < 2026.4.2 - Cleartext Credential Transmission via Unencrypted WebSocket Gateway Endpoints

    OpenClaw before 2026.4.2 accepts non-loopback cleartext ws:// gateway endpoints and transmits stored gateway credentials over unencrypted connections. Attackers can forge discovery results or craft setup codes to redirect clients to malicious endpoints, discl…

    OpenClaw OpenClaw openclaw npm
  • Medium 5.7
    CVE-2026-42424

    OpenClaw < 2026.4.8 - Local File Exfiltration via Shared Reply MEDIA Paths

    OpenClaw before 2026.4.8 treats shared reply MEDIA paths as trusted, allowing crafted references to trigger cross-channel local file exfiltration. Attackers can exploit this by crafting malicious shared reply MEDIA references to cause another channel to read …

    OpenClaw OpenClaw openclaw npm
  • Medium 5.4
    CVE-2026-41916

    OpenClaw < 2026.4.8 - Stale Authentication State via Config Reload

    OpenClaw before 2026.4.8 contains an authentication state management vulnerability where the resolvedAuth closure becomes stale after configuration reload. Newly accepted gateway connections continue using outdated resolved auth state, allowing attackers to b…

    OpenClaw OpenClaw openclaw npm
  • Medium 5.4
    CVE-2026-42421

    OpenClaw < 2026.4.8 - WebSocket Session Persistence via Shared Gateway Token Rotation

    OpenClaw before 2026.4.8 contains a session management vulnerability where existing WebSocket sessions survive shared gateway token rotation. Attackers can maintain unauthorized access to WebSocket connections after token rotation by exploiting the failure to…

    OpenClaw OpenClaw openclaw npm
  • Medium 5.3
    CVE-2026-41915

    OpenClaw < 2026.4.8 - Git Environment Variable Injection via Unfiltered Exec Environment

    OpenClaw before 2026.4.8 fails to remove git plumbing environment variables from the execution environment before host exec operations. Attackers can exploit this by setting GIT_DIR and related variables to redirect git operations and compromise repository in…

    OpenClaw OpenClaw openclaw npm
  • Medium 5.3
    CVE-2026-42427

    OpenClaw < 2026.4.8 - Remote Code Execution via Build Tool Environment Variable Injection

    OpenClaw before 2026.4.8 contains a remote code execution vulnerability caused by missing environment variable denylist entries for HGRCPATH, CARGO_BUILD_RUSTC_WRAPPER, RUSTC_WRAPPER, and MAKEFLAGS. Attackers can inject malicious build tool environment variab…

    OpenClaw OpenClaw openclaw npm
  • Medium 4.3
    CVE-2026-41910

    OpenClaw < 2026.4.8 - Missing Owner-Only Enforcement in /allowlist Cross-Channel Writes

    OpenClaw before 2026.4.8 omits owner-only enforcement for cross-channel allowlist writes in the /allowlist endpoint. An authorized non-owner sender can bypass access controls to perform allowlist modifications against different channels, violating the intende…

    OpenClaw OpenClaw openclaw npm
  • Medium 4.3
    CVE-2026-42420

    OpenClaw < 2026.4.8 - Improper Base64 Decoding Size Validation

    OpenClaw before 2026.4.8 contains improper input validation in base64 decode paths that allocate memory before enforcing decoded-size limits. Attackers can exploit multiple code paths to cause memory exhaustion or denial of service through crafted base64-enco…

    OpenClaw OpenClaw openclaw npm
  • Low 3.7
    CVE-2026-41913

    OpenClaw < 2026.4.4 - Rate-Limit Bypass via Concurrent Async Authentication Attempts

    OpenClaw before 2026.4.4 contains a race condition vulnerability in shared-secret authentication that allows concurrent asynchronous requests to bypass the per-key rate-limit budget. Attackers can exploit this by sending multiple simultaneous authentication a…

    OpenClaw OpenClaw openclaw npm
  • Medium —
    CVE-2026-39398 Rejected

    openclaw-claude-bridge: sandbox is not effective - `--allowed-tools ""` does not restrict available tools

    The affected product and advisory are not public.

    openclaw-claude-bridge npm

Revision history

  1. #3

    CVE-Nummern ergänzt

  2. #2

    CVE ergänzt

  3. #1

    Initiale Fassung

References