DeutschShown in its original language — a full translation is planned for a future version.
OpenClaw: Mehrere Schwachstellen
view advisory published 2026-03-12
Ein Angreifer kann mehrere Schwachstellen in OpenClaw ausnutzen, um Administratorrechte zu erlangen, beliebigen Code auszuführen, Daten zu manipulieren, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen oder andere nicht näher spezifizierte Angriffe durchzuführen.
01
describes (20)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-34508US | — | — | ||
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | ||||
| CVE-2026-34505US | — | — | ||
OpenClaw before 2026.3.12 applies rate limiting only after successful webhook authentication, allowing attackers to bypass rate limits and brute-force webhook secrets. Attackers ca… | ||||
| CVE-2026-32977US | — | — | ||
OpenClaw before 2026.3.11 contains a sandbox boundary bypass vulnerability in the fs-bridge writeFile commit step that uses an unanchored container path during the final move opera… | ||||
| CVE-2026-32976US | —OT elevated | — | ||
OpenClaw before 2026.3.11 contains an authorization bypass vulnerability allowing channel commands to mutate protected sibling-account configuration despite configWrites restrictio… | ||||
| CVE-2026-32970US | low3.3 | — | ||
OpenClaw before 2026.3.11 contains a credential fallback vulnerability where unavailable local gateway.auth.token and gateway.auth.password SecretRefs are treated as unset, allowin… | ||||
| CVE-2026-32920US | high8.8 | — | ||
OpenClaw before 2026.3.12 automatically discovers and loads plugins from .OpenClaw/extensions/ without explicit trust verification, allowing arbitrary code execution. Attackers can… | ||||
| CVE-2026-32916US | critical9.8 | — | ||
OpenClaw versions 2026.3.7 before 2026.3.11 contain an authorization bypass vulnerability where plugin subagent routes execute gateway methods through a synthetic operator client w… | ||||
| CVE-2026-33575US | — | — | ||
OpenClaw before 2026.3.12 embeds long-lived shared gateway credentials directly in pairing setup codes generated by /pair endpoint and OpenClaw qr command. Attackers with access to… | ||||
| CVE-2026-32979US | medium6.7 | — | ||
OpenClaw before 2026.3.11 contains an approval integrity vulnerability allowing attackers to execute rewritten local code by modifying scripts between approval and execution when e… | ||||
| CVE-2026-32978US | high7.5OT elevated | — | ||
OpenClaw before 2026.3.11 contains an approval integrity vulnerability where system.run approvals fail to bind mutable file operands for certain script runners like tsx and jiti. A… | ||||
| CVE-2026-32975US | —OT elevated | — | ||
OpenClaw before 2026.3.12 contains a weak authorization vulnerability in Zalouser allowlist mode that matches mutable group display names instead of stable group identifiers. Attac… | ||||
| CVE-2026-32973US | — | — | ||
OpenClaw before 2026.3.11 contains an exec allowlist bypass vulnerability where matchesExecAllowlistPattern improperly normalizes patterns with lowercasing and glob matching that o… | ||||
| CVE-2026-32924US | —OT elevated | — | ||
OpenClaw before 2026.3.12 contains an authorization bypass vulnerability where Feishu reaction events with omitted chat_type are misclassified as p2p conversations instead of group… | ||||
| CVE-2026-32923US | —OT elevated | — | ||
OpenClaw before 2026.3.11 contains an authorization bypass vulnerability in Discord guild reaction ingestion that fails to enforce member users and roles allowlist checks. Non-allo… | ||||
| CVE-2026-32922US | — | — | ||
OpenClaw before 2026.3.11 contains a privilege escalation vulnerability in device.token.rotate that allows callers with operator.pairing scope to mint tokens with broader scopes by… | ||||
| CVE-2026-32919US | —OT elevated | — | ||
OpenClaw before 2026.3.11 contains an authorization bypass vulnerability allowing write-scoped callers to reach admin-only session reset logic. Attackers with operator.write scope… | ||||
| CVE-2026-32918US | —OT elevated | — | ||
OpenClaw before 2026.3.11 contains a session sandbox escape vulnerability in the session_status tool that allows sandboxed subagents to access parent or sibling session state. Atta… | ||||
| CVE-2026-32055US | high8.2 | — | ||
OpenClaw versions prior to 2026.2.26 contain a path traversal vulnerability in workspace boundary validation that allows attackers to write files outside the workspace through in-w… | ||||
| CVE-2026-32031US | medium6.5OT elevated | — | ||
OpenClaw versions prior to 2026.2.26 server-http contains an authentication bypass vulnerability in gateway authentication for plugin channel endpoints due to path canonicalization… | ||||
| CVE-2026-32302US | high8.1 | — | ||
OpenClaw is a personal AI assistant. Prior to 2026.3.11, browser-originated WebSocket connections could bypass origin validation when gateway.auth.mode was set to trusted-proxy and… | ||||
02
references
External citations — patches, advisories, analysis.
- GitHub Security Advisory GHSA-8j2w-6fmm-m587 vom 2026-03-12external
- GitHub Security Advisory GHSA-gp3q-wpq4-5c5h vom 2026-03-12external
- GitHub Security Advisory GHSA-mgrq-9f93-wpp5 vom 2026-03-12external
- GitHub Advisory Database vom 2026-03-12external
- GitHub Security Advisory GHSA-4jpw-hj22-2xmc vom 2026-03-12external
- GitHub Security Advisory GHSA-5m9r-p9g7-679c vom 2026-03-12external
- GitHub Security Advisory GHSA-5wcw-8jjv-m286 vom 2026-03-12external
- GitHub Security Advisory GHSA-7h7g-x2px-94hj vom 2026-03-12external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan