Skip to content
OpenAdvisories
High WID-SEC-2026-1253 7 CVEs

OpenClaw: Mehrere Schwachstellen

Published Apr 23, 2026 · Updated May 11, 2026 · Revision 3 · de-DE

Summary

Ein Angreifer kann mehrere Schwachstellen in OpenClaw ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Daten offenzulegen oder zu manipulieren oder andere, nicht näher spezifizierte Angriffe durchzuführen.

Product

OpenClaw ist ein persönlicher KI-Assistent zur Ausführung auf eigenen Geräten.

Vulnerabilities 7

  • High 8.8
    CVE-2026-44115

    OpenClaw < 2026.4.22 - Shell Expansion Bypass in Unquoted Heredocs via Exec Allowlist

    OpenClaw before 2026.4.22 contains an exec allowlist analysis vulnerability allowing shell expansion hiding in unquoted heredoc bodies. Attackers can bypass allowlist validation by embedding shell expansion tokens in heredoc bodies to execute unapproved comma…

    OpenClaw OpenClaw openclaw npm
  • High 8.6
    CVE-2026-44116

    OpenClaw < 2026.4.22 - Server-Side Request Forgery in Zalo Photo URL Validation

    OpenClaw before 2026.4.22 contains a server-side request forgery vulnerability in the Zalo plugin's sendPhoto function that fails to validate outbound photo URLs through the SSRF guard. Attackers can bypass SSRF protection by providing malicious photo URLs to…

    OpenClaw OpenClaw openclaw npm
  • High 7.8
    CVE-2026-44114

    OpenClaw < 2026.4.20 - Environment Variable Namespace Collision via Workspace dotenv

    OpenClaw before 2026.4.20 fails to properly reserve the OPENCLAW_ runtime-control environment namespace in workspace dotenv files, allowing attackers to override critical runtime variables. Malicious workspaces can set variables like OPENCLAW_GIT_DIR to manip…

    OpenClaw OpenClaw openclaw npm
  • High 7.8
    CVE-2026-44118

    OpenClaw < 2026.4.22 - Owner Context Spoofing via Bearer Token Header

    OpenClaw before 2026.4.22 derives loopback MCP owner context from spoofable server-issued bearer tokens in request headers. Non-owner loopback clients can present themselves as owner to bypass owner-gated operations by manipulating the sender-owner header met…

    OpenClaw OpenClaw openclaw npm
  • High 7.7
    CVE-2026-44113

    OpenClaw < 2026.4.22 - Time-of-Check/Time-of-Use Race Condition in OpenShell FS Bridge

    OpenClaw before 2026.4.22 contains a time-of-check/time-of-use race condition in the OpenShell filesystem bridge that allows attackers to read files outside the intended mount root. Attackers can exploit symlink swaps during filesystem operations to bypass sa…

    OpenClaw OpenClaw openclaw npm
  • Medium 5.3
    CVE-2026-44994

    OpenClaw < 2026.4.22 - Authentication Bypass in Gateway Control UI Bootstrap Config Endpoint

    OpenClaw before 2026.4.22 contains an authentication bypass vulnerability in the Control UI bootstrap config endpoint that allows unauthenticated attackers to read sensitive configuration fields. Attackers can access the bootstrap config route without a valid…

    OpenClaw OpenClaw openclaw npm
  • Medium 5.0
    CVE-2026-45003

    OpenClaw < 2026.4.22 - Connector Endpoint Host Override via Workspace dotenv Files

    OpenClaw before 2026.4.22 allows workspace dotenv files to override connector endpoint hosts for Matrix, Mattermost, IRC, and Synology connectors. Attackers with workspace access can redirect runtime traffic to malicious endpoints by setting endpoint variable…

    OpenClaw OpenClaw openclaw npm

Revision history

  1. #3

    CVE-2026-44994, CVE-2026-45003 ergänzt

  2. #2

    CVE's ergänzt

  3. #1

    Initiale Fassung

References