Skip to content
OpenAdvisories

Vendor

clawdbot

2 known vulnerabilities.

Products

clawdbot 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.7
    CVE-2026-24764

    OpenClaw has Remote Code Execution via System Prompt Injection in Slack Channel Descriptions

    OpenClaw (formerly Clawdbot) is a personal AI assistant users run on their own devices. In versions 2026.2.2 and below, when the Slack integration is enabled, channel metadata (topic/description) can be incorporated into the model's system prompt. Prompt inje…

    clawdbot clawdbot openclaw npm