Skip to content
OpenAdvisories
High WID-SEC-2026-1065 13 CVEs

OpenClaw: Mehrere Schwachstellen

Published Apr 12, 2026 · Updated Apr 12, 2026 · de-DE

Summary

Ein Angreifer kann mehrere Schwachstellen in OpenClaw ausnutzen, um Administratorrechte zu erlangen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten offenzulegen oder zu manipulieren oder andere, nicht näher spezifizierte Angriffe durchzuführen.

Product

OpenClaw ist ein persönlicher KI-Assistent zur Ausführung auf eigenen Geräten.

Vulnerabilities 13

  • High 8.8
    CVE-2026-35663

    OpenClaw < 2026.3.25 - Privilege Escalation via Backend Reconnect Scope Self-Claim

    OpenClaw before 2026.3.25 contains a privilege escalation vulnerability allowing non-admin operators to self-request broader scopes during backend reconnect. Attackers can bypass pairing requirements to reconnect as operator.admin, gaining unauthorized admini…

    OpenClaw OpenClaw openclaw npm
  • High 8.8
    CVE-2026-35669

    OpenClaw < 2026.3.25 - Privilege Escalation via Gateway Plugin HTTP Authentication Scope

    OpenClaw before 2026.3.25 contains a privilege escalation vulnerability in gateway-authenticated plugin HTTP routes that incorrectly mint operator.admin runtime scope regardless of caller-granted scopes. Attackers can exploit this scope boundary bypass to gai…

    OpenClaw OpenClaw openclaw npm
  • High 8.1
    CVE-2026-35653

    OpenClaw < 2026.3.24 - Incorrect Authorization in POST /reset-profile via browser.request

    OpenClaw before 2026.3.24 contains an incorrect authorization vulnerability in the POST /reset-profile endpoint that allows authenticated callers with operator.write access to browser.request to bypass profile mutation restrictions. Attackers can invoke POST …

    OpenClaw OpenClaw openclaw npm
  • High 7.8
    CVE-2026-35641

    OpenClaw < 2026.3.24 - Arbitrary Code Execution via .npmrc in Local Plugin/Hook Installation

    OpenClaw before 2026.3.24 contains an arbitrary code execution vulnerability in local plugin and hook installation that allows attackers to execute malicious code by crafting a .npmrc file with a git executable override. During npm install execution in the st…

    OpenClaw OpenClaw openclaw npm
  • High 7.7
    CVE-2026-35668

    OpenClaw < 2026.3.24 - Sandbox Media Root Bypass via Unnormalized mediaUrl and fileUrl Parameters

    OpenClaw before 2026.3.24 contains a path traversal vulnerability in sandbox enforcement allowing sandboxed agents to read arbitrary files from other agents' workspaces via unnormalized mediaUrl or fileUrl parameter keys. Attackers can exploit incomplete para…

    OpenClaw OpenClaw openclaw npm
  • Medium 6.5
    CVE-2026-35621

    OpenClaw < 2026.3.24 - Privilege Escalation via chat.send to Allowlist Persistence

    OpenClaw before 2026.3.24 contains a privilege escalation vulnerability where the /allowlist command fails to re-validate gateway client scopes for internal callers, allowing operator.write-scoped clients to mutate channel authorization policy. Attackers can …

    OpenClaw OpenClaw openclaw npm
  • Medium 6.1
    CVE-2026-35667

    OpenClaw < 2026.3.24 - Improper Process Termination via Unpatched killProcessTree in shell-utils.ts

    OpenClaw before 2026.3.24 contains an incomplete fix for CVE-2026-27486 where the !stop chat command uses an unpatched killProcessTree function from shell-utils.ts that sends SIGKILL immediately without graceful SIGTERM shutdown. Attackers can trigger process…

    OpenClaw OpenClaw openclaw npm
  • Medium 5.4
    CVE-2026-35620

    OpenClaw < 2026.3.24 - Missing Authorization in /send and /allowlist Chat Commands

    OpenClaw before 2026.3.24 contains missing authorization vulnerabilities in the /send and /allowlist chat command handlers. The /send command allows non-owner command-authorized senders to change owner-only session delivery policy settings, and the /allowlist…

    OpenClaw OpenClaw openclaw npm
  • Medium 5.3
    CVE-2026-35647

    OpenClaw < 2026.3.25 - Direct Message Policy Bypass via Verification Notices

    OpenClaw before 2026.3.25 contains an access control vulnerability where verification notices bypass DM policy checks and reply to unpaired peers. Attackers can send verification notices to users outside allowed direct message policies by exploiting insuffici…

    OpenClaw OpenClaw openclaw npm
  • Medium 5.3
    CVE-2026-35654

    OpenClaw < 2026.3.25 - Authorization Bypass in Microsoft Teams Feedback Invoke

    OpenClaw before 2026.3.25 contains an authorization bypass vulnerability in Microsoft Teams feedback invokes that allows unauthorized senders to record session feedback. Attackers can bypass sender allowlist checks via feedback invoke endpoints to trigger una…

    OpenClaw OpenClaw openclaw npm
  • Medium 5.3
    CVE-2026-35665

    OpenClaw < 2026.3.24 - Denial of Service via Feishu Webhook Pre-Auth Body Parsing

    OpenClaw before 2026.3.24 contains an incomplete fix for CVE-2026-32011 where the Feishu webhook handler accepts request bodies with permissive limits of 1MB and 30-second timeout before signature verification. An unauthenticated attacker can exhaust server c…

    OpenClaw OpenClaw openclaw npm
  • Medium 4.3
    CVE-2026-27486

    OpenClaw: Process Safety - Unvalidated PID Kill via SIGKILL in Process Cleanup

    OpenClaw is a personal AI assistant. In versions 2026.2.13 and below of the OpenClaw CLI, the process cleanup uses system-wide process enumeration and pattern matching to terminate processes without verifying if they are owned by the current OpenClaw process.…

    OpenClaw OpenClaw openclaw npm
  • Medium 4.3
    CVE-2026-35619

    OpenClaw < 2026.3.24 - Authorization Bypass via HTTP /v1/models Endpoint

    OpenClaw before 2026.3.24 contains an authorization bypass vulnerability in the HTTP /v1/models endpoint that fails to enforce operator read scope requirements. Attackers with only operator.approvals scope can enumerate gateway model metadata through the HTTP…

    OpenClaw OpenClaw openclaw npm

Revision history

  1. #1

    Initiale Fassung

References