DeutschShown in its original language — a full translation is planned for a future version.
OpenClaw: Mehrere Schwachstellen
view advisory published 2026-03-08
Ein Angreifer kann mehrere Schwachstellen in OpenClaw ausnutzen, um Informationen offenzulegen, um einen Denial of Service Angriff durchzuführen, um Dateien zu manipulieren, um Sicherheitsvorkehrungen zu umgehen, und um beliebigen Programmcode auszuführen.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-32913US | critical9.1 | Exploit | ||
OpenClaw before 2026.3.7 contains an improper header validation vulnerability in fetchWithSsrFGuard that forwards custom authorization headers across cross-origin redirects. Attack… | ||||
| CVE-2026-27646US | —OT elevated | — | ||
OpenClaw versions prior to 2026.3.7 contain a sandbox escape vulnerability in the /acp spawn command that allows authorized sandboxed sessions to initialize host-side ACP runtime.… | ||||
| CVE-2026-27183US | —OT elevated | — | ||
OpenClaw versions prior to 2026.3.7 contain a shell approval gating bypass vulnerability in system.run dispatch-wrapper handling that allows attackers to skip shell wrapper approva… | ||||
02
references
External citations — patches, advisories, analysis.
- OpenClaw GitHub vom 2026-03-08external
- OpenClaw GitHub vom 2026-03-08external
- OpenClaw GitHub vom 2026-03-08external
- OpenClaw GitHub vom 2026-03-08external
- OpenClaw GitHub vom 2026-03-08external
- OpenClaw GitHub vom 2026-03-08external
- OpenClaw GitHub vom 2026-03-08external
- OpenClaw GitHub vom 2026-03-08external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan