Skip to content
OpenAdvisories

Package · npm

openclaw

589 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2026-41303 Public exploit

    OpenClaw < 2026.3.28 - Authorization Bypass in Discord Text Approval Commands

    OpenClaw before 2026.3.28 contains an authorization bypass vulnerability in Discord text approval commands that allows non-approvers to resolve pending exec approvals. Attackers can send Discord text commands to bypass the channels.discord.execApprovals.appro…

    OpenClaw OpenClaw openclaw npm
  • High 8.8
    CVE-2026-32013 Public exploit

    OpenClaw < 2026.2.25 - Symlink Traversal in agents.files Methods

    OpenClaw versions prior to 2026.2.25 contain a symlink traversal vulnerability in the agents.files.get and agents.files.set methods that allows reading and writing files outside the agent workspace. Attackers can exploit symlinked allowlisted files to access …

    OpenClaw OpenClaw openclaw npm