Skip to content
OpenAdvisories

Product · OpenClaw

OpenClaw Windows Node

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.4
    CVE-2026-101883

    OpenClaw Windows Node through 2026.9.4 SSRF via canvas.present

    OpenClaw Windows Node through 2026.9.4 contains a server-side request forgery vulnerability in the canvas.present capability that bypasses URL risk evaluation enforced by canvas.navigate. Attackers with gateway or agent access can issue canvas.present to make…

    OpenClaw OpenClaw Windows Node Windows
  • Medium 6.5
    CVE-2026-101881

    OpenClaw Windows Node before 2026.7.1 Denial of Service

    OpenClaw Windows Node before 2026.7.1 contains an allocation of resources without limits vulnerability in the gateway WebSocket transport that allows connected gateways to exhaust node memory. Attackers can send an unending sequence of WebSocket continuation …

    OpenClaw OpenClaw Windows Node Windows
  • Medium 6.5
    CVE-2026-101879

    OpenClaw Windows Node before 2026.7.1-3 Missing Authorization

    OpenClaw Windows Node before 2026.7.1-3 contains a missing authorization vulnerability in NodeService capture handlers that allows connected gateways or agents to perform screen snapshots, camera snaps, and location captures without consent prompts. Attackers…

    OpenClaw OpenClaw Windows Node Windows