Summary
Ein Angreifer kann mehrere Schwachstellen in OpenClaw ausnutzen, um Sicherheitsvorkehrungen zu umgehen, und um Informationen offenzulegen.
Product
OpenClaw ist ein persönlicher KI-Assistent zur Ausführung auf eigenen Geräten.
Vulnerabilities 2
-
Medium 6.3
OpenClaw before 2026.9.5 Sandbox Isolation Bypass via Media Pipelines
OpenClaw before 2026.9.5 contains an incorrect authorization vulnerability in the Gateway's local media root allowlist that breaks filesystem isolation between sandboxed sessions. Sandboxed sessions or untrusted content can cause the Gateway to read files fro…
-
Medium 5.3
OpenClaw before 2026.9.4 Authorization Bypass via MCP App Standalone Ticket
OpenClaw before 2026.9.4 contains an incorrect authorization vulnerability in the mcp.app.view method that allows read-scoped operators to execute MCP App tools requiring operator.write scope. Attackers with operator.read tokens can obtain a standalone ticket…
Revision history
-
#1
Initiale Fassung
References
-
GitHub Security Advisory GHSA-8F5C-296X-75HM vom 2026-09-29
https://github.com/advisories/GHSA-8F5C-296X-75HM
-
GitHub Security Advisory GHSA-3XRQ-G42V-GH57 vom 2026-09-29
https://github.com/advisories/GHSA-3XRQ-G42V-GH57