WID-SEC-W-2026-0743

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

OpenClaw: Mehrere Schwachstellen

view advisory published 2026-03-16

Ein Angreifer kann mehrere Schwachstellen in OpenClaw ausnutzen, um seine Privilegien zu erhöhen und um vertrauliche Informationen offenzulegen.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2026-32982US——
OpenClaw before 2026.3.13 contains an information disclosure vulnerability in the fetchRemoteMedia function that exposes Telegram bot tokens in error messages. When media downloads…
CVE-2026-32987US—OT elevated—
OpenClaw before 2026.3.13 allows bootstrap setup codes to be replayed during device pairing verification in src/infra/device-bootstrap.ts. Attackers can verify a valid bootstrap co…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan