DeutschShown in its original language — a full translation is planned for a future version.
OpenClaw: Mehrere Schwachstellen
view advisory published 2026-03-24
Ein Angreifer kann mehrere Schwachstellen in OpenClaw ausnutzen, um beliebigen Code auszuführen, erweiterte Berechtigungen – sogar Administratorrechte – zu erlangen, Daten zu manipulieren, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen oder andere, nicht näher spezifizierte Angriffe durchzuführen.
01
describes (25)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-35670US | high8.1 | — | ||
OpenClaw before 2026.3.22 contains a webhook reply delivery vulnerability that allows attackers to rebind chat replies to unintended users by exploiting mutable username matching i… | ||||
| CVE-2026-35666US | —OT elevated | — | ||
OpenClaw before 2026.3.22 contains an allowlist bypass vulnerability in system.run approvals that fails to unwrap /usr/bin/time wrappers. Attackers can bypass executable binding re… | ||||
| CVE-2026-35660US | —OT elevated | — | ||
OpenClaw before 2026.3.23 contains an insufficient access control vulnerability in the Gateway agent /reset endpoint that allows callers with operator.write permission to reset adm… | ||||
| CVE-2026-35659US | medium6.3OT elevated | — | ||
OpenClaw before 2026.3.22 contains a service discovery vulnerability where TXT metadata from Bonjour and DNS-SD could influence CLI routing even when actual service resolution fail… | ||||
| CVE-2026-35658US | —OT elevated | — | ||
OpenClaw before 2026.3.2 contains a filesystem boundary bypass vulnerability in the image tool that fails to honor tools.fs.workspaceOnly restrictions. Attackers can traverse sandb… | ||||
| CVE-2026-35656US | — | — | ||
OpenClaw before 2026.3.22 contains an authentication bypass vulnerability in the X-Forwarded-For header processing when trustedProxies is configured, allowing attackers to spoof lo… | ||||
| CVE-2026-35655US | —OT elevated | — | ||
OpenClaw before 2026.3.22 contains an identity spoofing vulnerability in ACP permission resolution that trusts conflicting tool identity hints from rawInput and metadata. Attackers… | ||||
| CVE-2026-35652US | critical9.1OT elevated | — | ||
OpenClaw before 2026.3.22 contains an authorization bypass vulnerability in interactive callback dispatch that allows non-allowlisted senders to execute action handlers. Attackers… | ||||
| CVE-2026-35649US | —OT elevated | — | ||
OpenClaw before 2026.3.22 contains a settings reconciliation vulnerability that allows attackers to bypass intended deny-all revocations by exploiting empty allowlist handling. The… | ||||
| CVE-2026-35648US | medium5.9OT elevated | — | ||
OpenClaw before 2026.3.22 contains a policy bypass vulnerability where queued node actions are not revalidated against current command policy when delivered. Attackers can exploit… | ||||
| CVE-2026-35643US | — | — | ||
OpenClaw before 2026.3.22 contains an unvalidated WebView JavascriptInterface vulnerability allowing attackers to inject arbitrary instructions. Untrusted pages can invoke the canv… | ||||
| CVE-2026-35644US | —OT elevated | — | ||
OpenClaw before 2026.3.22 contains an information disclosure vulnerability that allows attackers with operator.read scope to expose credentials embedded in channel baseUrl and http… | ||||
| CVE-2026-35639US | — | — | ||
OpenClaw before 2026.3.22 contains a privilege escalation vulnerability in the device.pair.approve method that allows an operator.pairing approver to approve pending device request… | ||||
| CVE-2026-35638US | — | — | ||
OpenClaw before 2026.3.22 contains a privilege escalation vulnerability in the Control UI that allows unauthenticated sessions to retain self-declared privileged scopes without dev… | ||||
| CVE-2026-35637US | —OT elevated | — | ||
OpenClaw before 2026.3.22 performs cite expansion before completing channel and DM authorization checks, allowing cite work and content handling prior to final auth decisions. Atta… | ||||
| CVE-2026-35635US | medium6.5OT elevated | — | ||
OpenClaw before 2026.3.22 contains a webhook path route replacement vulnerability in the Synology Chat extension that allows attackers to collapse multi-account configurations onto… | ||||
| CVE-2026-35634US | —OT elevated | — | ||
OpenClaw before 2026.3.23 contains an authentication bypass vulnerability in the Canvas gateway where authorizeCanvasRequest() unconditionally allows local-direct requests without… | ||||
| CVE-2026-35633US | — | — | ||
OpenClaw before 2026.3.22 contains an unbounded memory allocation vulnerability in remote media HTTP error handling that allows attackers to trigger excessive memory consumption. A… | ||||
| CVE-2026-35631US | —OT elevated | — | ||
OpenClaw before 2026.3.22 fails to enforce operator.admin scope on mutating internal ACP chat commands, allowing unauthorized modifications. Attackers without admin privileges can… | ||||
| CVE-2026-35627US | high8.2OT elevated | — | ||
OpenClaw before 2026.3.22 performs cryptographic and dispatch operations on inbound Nostr direct messages before enforcing sender and pairing policy validation. Attackers can trigg… | ||||
showing 20 of 25
02
references
External citations — patches, advisories, analysis.
- OpenClaw GitHub vom 2026-03-24external
- OpenClaw GitHub vom 2026-03-24external
- OpenClaw GitHub vom 2026-03-24external
- OpenClaw GitHub vom 2026-03-24external
- OpenClaw GitHub vom 2026-03-24external
- OpenClaw GitHub vom 2026-03-24external
- OpenClaw GitHub vom 2026-03-24external
- OpenClaw GitHub vom 2026-03-24external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan