Skip to content
OpenAdvisories
Medium WID-SEC-2026-1227 10 CVEs

OpenClaw: Mehrere Schwachstellen

Published Apr 21, 2026 · Updated May 11, 2026 · Revision 4 · de-DE

Summary

Ein Angreifer kann mehrere Schwachstellen in OpenClaw ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen, möglicherweise Sicherheitsmaßnahmen zu umgehen und Daten zu manipulieren oder offenzulegen.

Product

OpenClaw ist ein persönlicher KI-Assistent zur Ausführung auf eigenen Geräten.

Vulnerabilities 10

  • High 7.3
    CVE-2026-44995

    OpenClaw < 2026.4.20 - Arbitrary Code Execution via MCP stdio Environment Variables

    OpenClaw before 2026.4.20 contains an improper environment variable validation vulnerability in MCP stdio server configuration that allows attackers to execute arbitrary code. Malicious workspace configurations can pass dangerous startup variables like NODE_O…

    OpenClaw OpenClaw openclaw npm
  • High 7.1
    CVE-2026-45001

    OpenClaw < 2026.4.20 - Gateway Config Mutation Guard Bypass via Agent Tool Access

    OpenClaw before 2026.4.20 contains a guard bypass vulnerability in the agent-facing gateway config.patch and config.apply endpoints that fails to protect operator-trusted settings including sandbox policy, plugin enablement, gateway auth/TLS, hook routing, MC…

    OpenClaw OpenClaw openclaw npm
  • Medium 5.8
    CVE-2026-44117

    OpenClaw < 2026.4.20 - Server-Side Request Forgery in QQBot Direct Media Upload

    OpenClaw before 2026.4.20 contains a server-side request forgery vulnerability in QQBot direct media upload that skips URL validation. Attackers can bypass SSRF protections by sending crafted image URLs to uploadC2CMedia and uploadGroupMedia endpoints to rela…

    OpenClaw OpenClaw openclaw npm
  • Medium 5.4
    CVE-2026-41909

    OpenClaw < 2026.4.20 - Improper Authorization in Paired-Device Pairing Actions

    OpenClaw before 2026.4.20 contains an improper authorization vulnerability in paired-device pairing management that allows limited-scope sessions to enumerate and act on pairing requests. Attackers with paired-device access can approve or operate on unrelated…

    OpenClaw OpenClaw openclaw npm
  • Medium 5.4
    CVE-2026-44993

    OpenClaw < 2026.4.20 - Direct Message Misclassification in Feishu Card Actions

    OpenClaw before 2026.4.20 contains a message classification vulnerability in Feishu card-action callbacks that misclassifies direct messages as group conversations. Attackers can bypass dmPolicy enforcement by triggering card-action flows in direct message co…

    OpenClaw OpenClaw openclaw npm
  • Medium 5.4
    CVE-2026-44998

    OpenClaw < 2026.4.20 - Tool Policy Bypass via Bundled MCP/LSP Tools

    OpenClaw before 2026.4.20 contains a tool policy bypass vulnerability allowing bundled MCP and LSP tools to circumvent configured tool restrictions. Attackers with local agent access can append restricted tools to the effective tool set after policy filtering…

    OpenClaw OpenClaw openclaw npm
  • Medium 5.3
    CVE-2026-44999

    OpenClaw < 2026.4.20 - Improper Trust Labeling in Isolated Cron Awareness Events

    OpenClaw before 2026.4.20 fails to properly preserve untrusted labels for isolated cron awareness events, allowing webhook-triggered cron agent output to be recorded as trusted system events. Attackers can exploit this trust-labeling issue to strengthen promp…

    OpenClaw OpenClaw openclaw npm
  • Medium 5.3
    CVE-2026-45002

    OpenClaw < 2026.4.20 - Hook Session-Key Bypass via Template Mapping

    OpenClaw before 2026.4.20 contains a hook session-key bypass vulnerability that allows attackers to circumvent the hooks.allowRequestSessionKey opt-in restriction. Attackers can render externally influenced session keys through templated hook mappings to bypa…

    OpenClaw OpenClaw openclaw npm
  • Medium 5.0
    CVE-2026-45000

    OpenClaw < 2026.4.20 - Server-Side Request Forgery via Browser CDP Profile Creation

    OpenClaw before 2026.4.20 contains a server-side request forgery vulnerability in browser CDP profile creation that skips strict-mode SSRF policy checks. Attackers can create stored profiles pointing to private-network or metadata endpoints that bypass securi…

    OpenClaw OpenClaw openclaw npm
  • Medium 4.3
    CVE-2026-41908

    OpenClaw < 2026.4.20 - Scope Enforcement Bypass in Assistant-Media Route

    OpenClaw before 2026.4.20 contains a scope enforcement bypass vulnerability in the assistant-media route that allows trusted-proxy callers without operator.read scope to access protected assistant-media files and metadata. Attackers can bypass identity-bearin…

    OpenClaw OpenClaw openclaw npm

Revision history

  1. #4

    CVE-Nummern ergänzt

  2. #3

    CVE's ergänzt

  3. #2

    CVE-Nummern ergänzt

  4. #1

    Initiale Fassung

References