Skip to content
OpenAdvisories
High WID-SEC-2026-1738 64 CVEs

OpenClaw: Mehrere Schwachstellen

Published May 28, 2026 · Updated Jun 16, 2026 · Revision 5 · de-DE

Platform: Linux

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in OpenClaw ausnutzen, um Sicherheitsmechanismen zu umgehen, erhöhte Berechtigungen zu erlangen, Informationen offenzulegen, Konfigurationen zu manipulieren, beliebige Befehle oder Code auszuführen sowie interne Systeme über SSRF anzugreifen.

Product

OpenClaw ist ein persönlicher KI-Assistent zur Ausführung auf eigenen Geräten.

Vulnerabilities 64

  • Critical 9.8
    CVE-2026-53838

    OpenClaw < 2026.5.27 - Node Pairing State Mutation via Reconnection

    OpenClaw before 2026.5.27 contains a state mutation vulnerability in node pairing reconnection that allows paired nodes to confuse approval scope decisions. Attackers can exploit reconnection logic to restore or present broader node authority than intended, p…

    OpenClaw OpenClaw openclaw npm
  • High 8.8
    CVE-2026-35674

    OpenClaw < 2026.5.18 - Scope Bypass via Inherited chat.send Route

    OpenClaw before 2026.5.18 contains a scope bypass vulnerability in the Gateway chat.send route that allows scoped clients to execute privileged commands. Attackers with operator.write scope can deliver commands through inherited external routes to bypass oper…

    OpenClaw OpenClaw openclaw npm
  • High 8.8
    CVE-2026-53806

    OpenClaw < 2026.5.12 - Shell Option Parsing Bypass in Exec Revalidation

    OpenClaw before 2026.5.12 contains a shell option parsing vulnerability that allows combined POSIX shell flags to bypass exec revalidation checks. Attackers can exploit this by using combined shell options to execute inline shell content without intended allo…

    OpenClaw OpenClaw openclaw npm
  • High 8.8
    CVE-2026-53807

    OpenClaw < 2026.5.6 - Authorization Bypass in Telegram Interactive Callbacks via commands.allowFrom

    OpenClaw before 2026.5.6 contains an authorization bypass vulnerability in Telegram interactive callbacks that allows authenticated users to skip commands.allowFrom validation. Attackers can invoke affected callbacks to mark themselves as authorized senders b…

    OpenClaw OpenClaw openclaw npm
  • High 8.8
    CVE-2026-53810

    OpenClaw < 2026.5.18 - Arbitrary Code Execution via Unscanned Marketplace Runtime Extension Metadata

    OpenClaw before 2026.5.18 contains a code execution vulnerability where marketplace runtime extension metadata can redirect loading toward unscanned package payloads. Attackers with trusted operator access can manipulate extension metadata to load plugin code…

    OpenClaw OpenClaw openclaw npm
  • High 8.8
    CVE-2026-53811

    OpenClaw < 2026.5.7 - Privilege Escalation via Mutable Display Names in Matrix allowFrom

    OpenClaw before 2026.5.7 contains a privilege escalation vulnerability in the Matrix allowFrom feature that allows authenticated accounts to match policy entries through mutable display name metadata. Attackers with the ability to change display names can rec…

    OpenClaw OpenClaw openclaw npm
  • High 8.8
    CVE-2026-53817

    OpenClaw < 2026.5.22 - Control UI Locality Spoofing in Device Pairing

    OpenClaw before 2026.5.22 contains a locality validation vulnerability in Control UI pairing that allows attackers with network access to spoof locality information and obtain durable admin-capable device tokens. Attackers can exploit insufficient locality-de…

    OpenClaw OpenClaw openclaw npm
  • High 8.8
    CVE-2026-53819

    OpenClaw < 2026.5.27 - Arbitrary Homebrew Executable Execution via Workspace .env Override

    OpenClaw before 2026.5.27 contains an arbitrary code execution vulnerability in skill install flows where workspace .env files can override the Homebrew executable selection. Attackers with access to trusted operator workspaces can execute unintended Homebrew…

    OpenClaw OpenClaw openclaw npm
  • High 8.8
    CVE-2026-53821

    OpenClaw < 2026.5.18 - Scope Elevation in trusted-proxy Control UI WebSocket

    OpenClaw before 2026.5.18 accepts WebSocket client-declared operator scopes before binding to server-approved pairing or trusted-proxy authorization baseline. Unpaired or restricted trusted-proxy Control UI clients can obtain cached operator.admin authority o…

    OpenClaw OpenClaw openclaw npm
  • High 8.8
    CVE-2026-53822

    OpenClaw < 2026.5.18 - Command Argument Modification via Shell Wrapper Between Approval and Execution

    OpenClaw before 2026.5.18 contains a command injection vulnerability where shell wrapper argv could change between approval and execution. Attackers can rebuild command arguments after allowlist approval to execute unapproved command shapes, potentially bypas…

    OpenClaw OpenClaw openclaw npm
  • High 8.8
    CVE-2026-53828

    OpenClaw < 2026.5.6 - Native Command Authorization Bypass via Owner-Command Enforcement

    OpenClaw before 2026.5.6 contains an authorization bypass vulnerability in native command handling that allows authenticated senders to execute owner-only commands without proper policy enforcement. Attackers can trigger native command handling to bypass the …

    OpenClaw OpenClaw openclaw npm
  • High 8.8
    CVE-2026-53843

    OpenClaw < 2026.5.26 - Node Token Revocation Bypass via Pairing-Scoped Device Session

    OpenClaw before 2026.5.26 contains an authorization bypass vulnerability where a surviving pairing-scoped device session can re-establish node token authority after revocation. Attackers with a paired device can regain WebSocket node-level access without rene…

    OpenClaw OpenClaw openclaw npm
  • High 8.3
    CVE-2026-53814

    OpenClaw < 2026.5.20 - Privilege Escalation via Hook-Triggered CLI MCP Tool Authority

    OpenClaw before 2026.5.20 contains a privilege escalation vulnerability where hook-triggered agent runs incorrectly receive owner-scoped MCP loopback authority instead of hook-appropriate scope. Attackers with a valid hook token can exploit the /hooks/agent e…

    OpenClaw OpenClaw openclaw npm
  • High 8.3
    CVE-2026-53831

    OpenClaw < 2026.5.18 - Arbitrary File Read via Shell Expansion in system.run Safe-bin Allowlist

    OpenClaw before 2026.5.18 contains a policy enforcement vulnerability in system.run safe-bin allowlist validation that allows shell expansion to modify command interpretation on POSIX nodes. Authenticated operators can exploit shell metacharacters in approved…

    OpenClaw OpenClaw openclaw npm
  • High 8.3
    CVE-2026-53853

    OpenClaw < 2026.5.12 - Argument Pattern Bypass in Exec Allowlist via Linux and macOS

    OpenClaw before 2026.5.12 contains an argument pattern validation bypass in the exec allowlist that allows attackers to execute disallowed arguments for allowlisted executables on Linux and macOS systems. Attackers can bypass configured argPattern restriction…

    OpenClaw OpenClaw openclaw npm
  • High 8.1
    CVE-2026-53823

    OpenClaw < 2026.5.3 - Privilege Escalation via Mutable Slack Display Names in allowFrom

    OpenClaw before 2026.5.3 contains a privilege escalation vulnerability in the allowFrom feature that binds to mutable Slack display names. Attackers with Slack account access can change display name metadata to match policy entries, potentially gaining unauth…

    OpenClaw OpenClaw openclaw npm
  • High 8.1
    CVE-2026-53849

    OpenClaw < 2026.5.7 - Privilege Escalation via Mutable Discord Display Names in allowFrom

    OpenClaw before 2026.5.7 contains a privilege escalation vulnerability where the allowFrom feature improperly validates Discord account identity using mutable display names instead of immutable user IDs. Attackers with Discord accounts can change their displa…

    OpenClaw OpenClaw openclaw npm
  • High 8.1
    CVE-2026-53855

    OpenClaw < 2026.4.2 - Shell Positional Parameters Bypass in Inline-Eval Checks

    OpenClaw before 2026.4.2 contains an inline-eval bypass vulnerability allowing authenticated operators to weaken strict allowlist checks via shell positional parameters. Attackers can combine allowlisted tools with shell positional arguments to place inline-e…

    OpenClaw OpenClaw openclaw npm
  • High 8.1
    CVE-2026-53857

    OpenClaw < 2026.5.3 - Mutable Display Name Binding in Zalo allowFrom Policy

    OpenClaw before 2026.5.3 contains a policy enforcement vulnerability where Zalo contacts with mutable display metadata could match allowFrom policy entries through display name changes. Attackers with mutable display names could receive agent responses intend…

    OpenClaw OpenClaw openclaw npm
  • High 8.1
    CVE-2026-53864

    OpenClaw < 2026.5.26 - Insufficient Environment Variable Sanitization in Node.js Control Variables

    OpenClaw before 2026.5.26 contains an insufficient sanitization vulnerability in the host environment sanitizer that allows Node.js control variables to bypass validation. Attackers with access to workspace .env files, tool environment overrides, or skill env…

    OpenClaw OpenClaw openclaw npm
  • High 8.1
    CVE-2026-53866

    OpenClaw < 2026.5.12 - Allowlist Bypass in Shell Inline-Command Parsing

    OpenClaw before 2026.5.12 contains an allowlist bypass vulnerability in shell inline-command parsing that allows authenticated operators to execute unapproved commands. A command request using shell inline-command forms could route through a parser case missi…

    OpenClaw OpenClaw openclaw npm
  • High 8.0
    CVE-2026-35630

    OpenClaw < 2026.5.18 - QQBot Missing Approver Identity Enforcement in Native Approval Buttons

    OpenClaw before 2026.5.18 contains an authorization bypass vulnerability in QQBot native approval buttons that fails to enforce configured approver identity. Non-approver users can click approval buttons to resolve pending exec or plugin approval requests wit…

    OpenClaw OpenClaw openclaw npm
  • High 8.0
    CVE-2026-53829

    OpenClaw < 2026.5.18 - Command Truncation in Exec Approval Display

    OpenClaw before 2026.5.18 contains an approval display truncation vulnerability allowing authenticated users to hide command suffixes from approvers. Attackers can submit oversized exec commands with benign prefixes and malicious suffixes to execute unauthori…

    OpenClaw OpenClaw openclaw npm
  • High 7.8
    CVE-2026-53813

    OpenClaw < 2026.4.25 - Arbitrary Artifact Loading via Fake Package Root Resolution

    OpenClaw before 2026.4.25 contains a path traversal vulnerability in memory-core artifact loading where workspace state influences local package root resolution. Attackers with access to affected workspaces can load memory-core artifacts from unintended local…

    OpenClaw OpenClaw openclaw npm
  • High 7.7
    CVE-2026-53812

    OpenClaw < 2026.5.18 - Private-Network Navigation Bypass via Browser Act Interactions

    OpenClaw before 2026.5.18 contains a server-side request forgery vulnerability in browser control that allows authenticated users to bypass private-network navigation checks through Playwright act interactions. Attackers can trigger navigation to private-netw…

    OpenClaw OpenClaw openclaw npm
  • High 7.7
    CVE-2026-53832

    OpenClaw < 2026.5.18 - Identity Header Forgery via Trusted-Proxy Configuration

    OpenClaw before 2026.5.18 contains an identity header validation vulnerability allowing local same-host callers to forge trusted-proxy identity headers. Attackers with access to the proxy-facing Gateway port can supply forged identity headers to assume operat…

    OpenClaw OpenClaw openclaw npm
  • High 7.7
    CVE-2026-53833

    QQBot for OpenClaw < 2026.4.29 - Authorization Bypass via QQBot Streaming Command

    OpenClaw before 2026.4.29 contains an authorization bypass vulnerability in the QQBot streaming command that allows authenticated senders to mutate configuration without explicit allowFrom restrictions. Attackers can modify QQBot streaming configuration outsi…

    OpenClaw OpenClaw openclaw npm
  • High 7.5
    CVE-2026-53834

    OpenClaw < 2026.4.27 - Authorization Bypass in QQBot Pre-dispatch Slash Commands

    OpenClaw before 2026.4.27 contains an authorization bypass vulnerability in QQBot pre-dispatch slash commands that allows authenticated senders to skip allowFrom policy checks. Attackers can invoke slash commands before configured access control policies are …

    OpenClaw OpenClaw openclaw npm
  • High 7.2
    CVE-2026-53816

    OpenClaw < 2026.5.18 - Exec Lifecycle Event Forgery via Paired Node

    OpenClaw before 2026.5.18 contains an insufficient provenance validation vulnerability in node event handling that allows paired nodes to forge exec lifecycle events without system.run authorization. A malicious or compromised paired node can send crafted nod…

    OpenClaw OpenClaw openclaw npm
  • High 7.1
    CVE-2026-53840

    OpenClaw < 2026.5.12 - Custom Header Leakage via MCP Streamable HTTP Cross-Origin Redirects

    OpenClaw before 2026.5.12 contains an information disclosure vulnerability in streamable-http MCP servers that forwards operator-configured custom headers during cross-origin redirects. Attackers controlling or compromising an MCP endpoint can redirect reques…

    OpenClaw OpenClaw openclaw npm
  • High 7.1
    CVE-2026-53842

    OpenClaw < 2026.5.2 - Arbitrary Python Runtime Execution via CLOUDSDK_PYTHON Environment Variable

    OpenClaw before 2026.5.2 contains an environment variable injection vulnerability allowing workspace .env files to influence Python runtime selection through CLOUDSDK_PYTHON during Gmail setup gcloud execution. Attackers with repository access can manipulate …

    OpenClaw OpenClaw openclaw npm
  • High 7.1
    CVE-2026-53846

    OpenClaw < 2026.4.29 - Arbitrary Package Manager Execution via Workspace .env npm_execpath

    OpenClaw before 2026.4.29 contains a path traversal vulnerability in the install helper that allows workspace .env files to override the npm_execpath configuration used for bundled runtime dependency installation. Attackers with workspace access can execute u…

    OpenClaw OpenClaw openclaw npm
  • High 7.1
    CVE-2026-53858

    OpenClaw < 2026.5.2 - Arbitrary Runtime Dependency Loading via STATE_DIRECTORY Environment Variable

    OpenClaw before 2026.5.2 contains an environment variable injection vulnerability where workspace .env STATE_DIRECTORY could influence bundled runtime dependency roots. Attackers can manipulate the STATE_DIRECTORY variable to load runtime dependencies from un…

    OpenClaw OpenClaw openclaw npm
  • High 7.1
    CVE-2026-53863

    OpenClaw < 2026.4.25 - Unvalidated Group ID Acceptance in Tool Group Policy

    OpenClaw before 2026.4.25 contains an input validation vulnerability in tool group policy callers that accept unvalidated group IDs. Attackers who can supply a group ID to the policy resolver could trigger incorrect group-policy decisions for tool invocations…

    OpenClaw OpenClaw openclaw npm
  • High 7.1
    CVE-2026-53865

    OpenClaw < 2026.5.2 - Arbitrary Command Execution via Workspace-Derived Service PATH

    OpenClaw before 2026.5.2 contains a path traversal vulnerability in maintenance task execution that allows workspace-derived service paths to influence trash command selection. Attackers can execute unintended local executables from operator-unintended paths …

    OpenClaw OpenClaw openclaw npm
  • Medium 6.6
    CVE-2026-53818

    OpenClaw < 2026.4.24 - Owner-Only Tool Policy Bypass via MCP Loopback

    OpenClaw before 2026.4.24 contains an authorization bypass vulnerability in the MCP loopback feature that allows non-owner callers to skip owner-only tool policies and before-tool-call hooks. Attackers can invoke owner-only behavior through the affected loopb…

    OpenClaw OpenClaw openclaw npm
  • Medium 6.6
    CVE-2026-53820

    OpenClaw < 2026.5.12 - Exec Denylist Bypass in Bundle MCP Loopback Session Spawn

    OpenClaw before 2026.5.12 contains an exec denylist bypass vulnerability in the bundle MCP loopback session-spawn path that allows authenticated callers to bypass intended command restrictions. Attackers can reach the affected bundled MCP session-spawn path t…

    OpenClaw OpenClaw openclaw npm
  • Medium 6.6
    CVE-2026-53861

    OpenClaw < 2026.5.6 - Allowlist Bypass via Combined POSIX Inline Flags on macOS

    OpenClaw before 2026.5.6 contains an allowlist bypass vulnerability in the macOS Swift exec feature that misses combined POSIX inline-command flags. Attackers can execute shell content outside the intended allowlist check by using combined flag forms, potenti…

    OpenClaw OpenClaw openclaw npm
  • Medium 6.5
    CVE-2026-35673

    OpenClaw < 2026.4.29 - SSRF Policy Bypass via Browser Debug/Export Routes

    OpenClaw before 2026.4.29 contains an SSRF policy bypass vulnerability in browser debug and export routes that allows reuse of already-open blocked tabs. Attackers with access to these routes can bypass private-network SSRF policies by reusing blocked tabs to…

    OpenClaw OpenClaw openclaw npm
  • Medium 6.5
    CVE-2026-53808

    OpenClaw < 2026.5.6 - Approval Policy Bypass in Skill Workshop Apply Flow

    OpenClaw before 2026.5.6 contains an approval policy bypass vulnerability in the Skill Workshop apply flow that allows agent tool calls to set apply: true despite approvalPolicy: pending configuration. Attackers can exploit this by reaching the affected apply…

    OpenClaw OpenClaw openclaw npm
  • Medium 6.5
    CVE-2026-53815

    OpenClaw < 2026.5.19 - Channel Allowlist Bypass in Message Read Actions

    OpenClaw before 2026.5.19 contains an authorization bypass vulnerability in message read actions that skips channel allowlist checks. Lower-trust callers can request messages from channels not intended for them by exploiting insufficient validation in the aff…

    OpenClaw OpenClaw openclaw npm
  • Medium 6.5
    CVE-2026-53824

    Mattermost plugin for OpenClaw < 2026.4.24 - Slash Token Revocation Lag via Monitor Refresh Delay

    OpenClaw before 2026.4.24 contains a token revocation vulnerability allowing callers with revoked slash tokens to continue executing commands during monitor refresh windows. Attackers can exploit stale token acceptance to invoke slash command behavior briefly…

    OpenClaw OpenClaw openclaw npm
  • Medium 6.5
    CVE-2026-53825

    OpenClaw < 2026.4.7 - Arbitrary Local File Read via memory-wiki Ingest with operator.write Scope

    OpenClaw before 2026.4.7 contains an arbitrary file read vulnerability in the memory-wiki ingest feature that allows authenticated Gateway operators with operator.write scope to read local files outside intended ingest sources. Attackers with operator.write a…

    OpenClaw OpenClaw openclaw npm
  • Medium 6.5
    CVE-2026-53827

    OpenClaw < 2026.5.2 - Credential Exposure via Model-Supplied Loopback URLs in message.action Forwarding

    OpenClaw before 2026.5.2 contains a credential exposure vulnerability in message.action forwarding that allows model-controlled metadata to forward action payloads with Gateway credentials to attacker-supplied loopback URLs. Remote attackers can intercept Gat…

    OpenClaw OpenClaw openclaw npm
  • Medium 6.5
    CVE-2026-53839

    OpenClaw < 2026.5.7 - Hostname Prefix Matching Bypass in Trusted Retry Endpoint Validation

    OpenClaw before 2026.5.7 contains a hostname validation vulnerability in retry endpoint checks that allows matching hostname prefixes instead of exact hostnames. Attackers can exploit this by crafting a hostname prefix resembling a trusted host to send authen…

    OpenClaw OpenClaw openclaw npm
  • Medium 6.5
    CVE-2026-53844

    OpenClaw < 2026.4.29 - Session Visibility Check Bypass in Shared Memory Search

    OpenClaw before 2026.4.29 contains a session visibility check bypass vulnerability in shared memory search that allows authenticated callers to access memory entries without proper authorization. Attackers can skip session visibility guards on the search path…

    OpenClaw OpenClaw openclaw npm
  • Medium 6.5
    CVE-2026-53854

    OpenClaw < 2026.4.25 - Privilege Escalation via ownerAllowFrom Wildcard Inheritance in Internal/Webchat Commands

    OpenClaw before 2026.4.25 contains a privilege escalation vulnerability in internal and webchat command authentication that allows senders to inherit wildcard ownerAllowFrom state across channel boundaries. Attackers can exploit this by sending commands on af…

    OpenClaw OpenClaw openclaw npm
  • Medium 6.5
    CVE-2026-53859

    OpenClaw < 2026.5.26 - Hostname Validation Bypass via Trailing-Dot Inconsistency

    OpenClaw before 2026.5.26 contains a hostname validation vulnerability allowing attackers to bypass blocklist comparisons using trailing-dot notation in model or workspace-derived URLs. Attackers can exploit inconsistent hostname checks to reach destinations …

    OpenClaw OpenClaw openclaw npm
  • Medium 6.1
    CVE-2026-53841

    OpenClaw < 2026.5.12 - Cross-Site Scripting via Unsafe Markdown Links in Exported Session HTML

    OpenClaw before 2026.5.12 contains a cross-site scripting vulnerability in exported session HTML that preserves unsafe javascript: and data: links in generated content. Attackers can execute browser-side scripts if a trusted operator opens the exported file a…

    OpenClaw OpenClaw openclaw npm
  • Medium 5.5
    CVE-2026-53850

    OpenClaw < 2026.4.25 - Control Scope Enforcement Bypass in Focus Command

    OpenClaw before 2026.4.25 contains a control scope enforcement bypass vulnerability in the focus command that allows authenticated callers to execute the command without proper authorization checks. Attackers can trigger the focus command to change focus stat…

    OpenClaw OpenClaw openclaw npm
  • Medium 5.5
    CVE-2026-53856

    OpenClaw 2026.4.23 < 2026.4.24 - Insecure File Permissions in Config Recovery via OpenClaw.json

    OpenClaw 2026.4.23 before 2026.4.24 contains an insecure file permissions vulnerability in config recovery that restores OpenClaw.json with overly broad permissions. Local attackers on shared hosts can read sensitive configuration data by exploiting the recov…

    OpenClaw OpenClaw openclaw npm
  • Medium 5.4
    CVE-2026-34507

    OpenClaw < 2026.4.29 - Policy Bypass in QQBot Admin Commands via DM-only and allowFrom Checks

    OpenClaw before 2026.4.29 contains a policy bypass vulnerability in QQBot admin commands that allows authenticated senders to skip DM-only and allowFrom policy checks. Attackers can route admin commands from unauthorized senders or contexts to execute restric…

    OpenClaw OpenClaw openclaw npm
  • Medium 5.4
    CVE-2026-53847

    OpenClaw < 2026.5.6 - Privilege Escalation via Active Memory Write Scope

    OpenClaw before 2026.5.6 contains a privilege escalation vulnerability in the Active Memory write scope that allows Gateway operators with operator.write access to modify global configuration without requiring operator.admin privileges. Attackers with operato…

    OpenClaw OpenClaw openclaw npm
  • Medium 5.4
    CVE-2026-53852

    OpenClaw < 2026.4.25 - Scope Bypass via Empty-Scope Device Re-pairing

    OpenClaw before 2026.4.25 contains a scope containment bypass vulnerability in device re-pairing that allows authenticated operators to restore broader scopes than intended by submitting empty-scope re-pairing requests. Attackers can exploit this by sending r…

    OpenClaw OpenClaw openclaw npm
  • Medium 5.3
    CVE-2026-53851

    OpenClaw < 2026.5.12 - Slack Reaction Event Notification Bypass

    OpenClaw before 2026.5.12 contains a notification bypass vulnerability allowing Slack reaction events to enter the agent pipeline despite disabled reaction notifications. Attackers can trigger unintended agent processing by sending reaction events when the fe…

    OpenClaw OpenClaw openclaw npm
  • Medium 4.3
    CVE-2026-32906

    OpenClaw < 2026.5.12 - Privilege Escalation in Slack Plugin Approvals via Exec Approver Gate

    OpenClaw before 2026.5.12 contains a privilege escalation vulnerability in Slack plugin approvals that allows exec-authorized users to resolve plugin approvals through the exec approver gate. Attackers with limited exec approval permissions can bypass intende…

    OpenClaw OpenClaw openclaw npm
  • Medium 4.3
    CVE-2026-53826

    OpenClaw < 2026.4.26 - Information Disclosure via Sandboxed Session Spawn

    OpenClaw before 2026.4.26 contains an information disclosure vulnerability in sandboxed session spawning that exposes the real workspace path to child prompts. Attackers can exploit this by spawning child sessions from sandboxed parents to reveal host workspa…

    OpenClaw OpenClaw openclaw npm
  • Medium 4.3
    CVE-2026-53835

    OpenClaw < 2026.5.6 - Config-Write Enforcement Bypass in Feishu Dynamic-Agent Bindings

    OpenClaw before 2026.5.6 contains a configuration enforcement bypass vulnerability in Feishu dynamic-agent bindings that allows authenticated senders to create or update bindings without honoring configured config-write controls. Attackers can exploit this by…

    OpenClaw OpenClaw openclaw npm
  • Medium 4.3
    CVE-2026-53845

    OpenClaw < 2026.5.6 - Skill-Command Dispatch Hook Bypass via Before-Tool-Call Hook Skipping

    OpenClaw before 2026.5.6 contains a hook bypass vulnerability where skill commands routed through the affected dispatch path skip before-tool-call hook coverage. Attackers can exploit this by sending skill commands through the vulnerable dispatch path to bypa…

    OpenClaw OpenClaw openclaw npm
  • Medium 4.3
    CVE-2026-53848

    OpenClaw < 2026.5.26 - Exec Allowlist Bypass via Transparent Command Wrappers

    OpenClaw before 2026.5.26 contains an exec allowlist bypass vulnerability allowing authenticated operators to execute wrapper-level side effects outside allowlisted command intent. Attackers can craft command requests that bypass allowlist validation by lever…

    OpenClaw OpenClaw openclaw npm
  • Medium 4.2
    CVE-2026-53860

    OpenClaw < 2026.5.7 - Sender Policy Bypass via Mutable Conversation Identifiers in BlueBubbles

    OpenClaw before 2026.5.7 contains a sender policy bypass vulnerability in BlueBubbles that allows participants to match allowlist entries through conversation metadata rather than stable sender identity. Attackers can influence conversation-level identifiers …

    OpenClaw OpenClaw openclaw npm
  • Medium 4.2
    CVE-2026-53862

    OpenClaw < 2026.5.12 - Bootstrap Token Replay via Pending Pairing Scope Widening

    OpenClaw before 2026.5.12 contains a bootstrap token replay vulnerability allowing callers with pending token access to reuse tokens with broader requested scopes. Attackers can replay bootstrap tokens before approval to escalate pairing authority beyond inte…

    OpenClaw OpenClaw openclaw npm
  • Low 3.8
    CVE-2026-53809

    OpenClaw < 2026.4.25 - Provider Alias Confusion in Embedded Runner Policy

    OpenClaw before 2026.4.25 contains a policy bypass vulnerability in embedded runner policy that allows requests using provider aliases to compare against aliases instead of canonical provider identities. Attackers can exploit this confusion to select bundled …

    OpenClaw OpenClaw openclaw npm
  • Low 3.7
    CVE-2026-53837

    OpenClaw < 2026.5.6 - Missing Channel Type Validation in Mattermost Event Handlers

    OpenClaw before 2026.5.6 contains an improper access control vulnerability in Mattermost event handlers that fails to validate channel type metadata. Attackers can bypass intended DM policy decisions by sending crafted Mattermost events missing channel type i…

    OpenClaw OpenClaw openclaw npm

Revision history

  1. #5

    Referenz(en) aufgenommen: CVE-2026-53858, EUVD-2026-37160, CVE-2026-53859, EUVD-2026-37161, CVE-2026-53860, EUVD-2026-37162, CVE-2026-53842, EUVD-2026-37144, CVE-2026-53852, EUVD-2026-37154, CVE-2026-53866, EUVD-2026-37168, CVE-2026-53847, EUVD-2026-37149, CVE-2026-53854, EUVD-2026-37156, CVE-2026-53850, EUVD-2026-37152, CVE-2026-53863, EUVD-2026-37165, GHSA-58WC-8WRV-XP9J, GHSA-4QGR-57JQ-93VH, CVE-2026-53861, EUVD-2026-37163, CVE-2026-53843, EUVD-2026-37145, CVE-2026-53848, EUVD-2026-37150, CVE-2026-53841, EUVD-2026-37143, CVE-2026-53853, EUVD-2026-37155, CVE-2026-53840, EUVD-2026-37142, CVE-2026-53865, EUVD-2026-37167, CVE-2026-53849, EUVD-2026-37151, CVE-2026-53862, EUVD-2026-37164, CVE-2026-53855, EUVD-2026-37157, CVE-2026-53846, EUVD-2026-37148, CVE-2026-53857, EUVD-2026-37159, CVE-2026-53856, EUVD-2026-37158, CVE-2026-53864, EUVD-2026-37166, CVE-2026-53851, EUVD-2026-37153, CVE-2026-53844, EUVD-2026-37146, CVE-2026-53845, EUVD-2026-37147

  2. #4

    Referenz(en) aufgenommen: CVE-2026-53837, EUVD-2026-36625, CVE-2026-53834, EUVD-2026-36622, CVE-2026-53833, EUVD-2026-36621, CVE-2026-53832, EUVD-2026-36620, CVE-2026-53831, EUVD-2026-36619, CVE-2026-53823, EUVD-2026-36611, CVE-2026-53838, EUVD-2026-36626, CVE-2026-53822, EUVD-2026-36610, CVE-2026-53839, EUVD-2026-36627, CVE-2026-53821, EUVD-2026-36609, CVE-2026-53829, GHSA-92QJ-8G54-QMPH, CVE-2026-53825, EUVD-2026-36613, EUVD-2026-36617, CVE-2026-53828, EUVD-2026-36616, CVE-2026-53826, EUVD-2026-36614, CVE-2026-53827, EUVD-2026-36615, CVE-2026-53824, EUVD-2026-36612, CVE-2026-53820, EUVD-2026-36608, CVE-2026-53835, EUVD-2026-36623

  3. #3

    Referenz(en) aufgenommen: CVE-2026-53818, EUVD-2026-36324, CVE-2026-53814, EUVD-2026-36320, CVE-2026-53815, EUVD-2026-36321, CVE-2026-53819, EUVD-2026-36325, CVE-2026-53817, EUVD-2026-36323, CVE-2026-53816, EUVD-2026-36322, CVE-2026-53810, EUVD-2026-36316, CVE-2026-53809, EUVD-2026-36315, CVE-2026-53808, EUVD-2026-36314, CVE-2026-53807, EUVD-2026-36313, CVE-2026-53806, EUVD-2026-36312, CVE-2026-53811, EUVD-2026-36317, CVE-2026-53812, EUVD-2026-36318, CVE-2026-53813, EUVD-2026-36319

  4. #2

    Referenz(en) aufgenommen: CVE-2026-35673, GHSA-7339-549C-W53J, CVE-2026-32906, EUVD-2026-33333, CVE-2026-34507, EUVD-2026-33334, CVE-2026-35630, EUVD-2026-33335, CVE-2026-35674, GHSA-9WCX-Q3FH-QG43, EUVD-2026-33337, EUVD-2026-33336

  5. #1

    Initiale Fassung

References