Skip to content
OpenAdvisories

Package · npm

openclaw

589 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

241 results · Clear filters · Feed

  • High 8.4
    CVE-2026-25593

    OpenClaw Affected by Unauthenticated Local RCE via WebSocket config.apply

    OpenClaw is a personal AI assistant. Prior to 2026.1.20, an unauthenticated local client could use the Gateway WebSocket API to write config via config.apply and set unsafe cliPath values that were later used for command discovery, enabling command injection …

    OpenClaw OpenClaw openclaw npm