DeutschShown in its original language — a full translation is planned for a future version.
OpenClaw: Mehrere Schwachstellen
view advisory published 2026-02-25
Ein Angreifer kann mehrere Schwachstellen in OpenClaw ausnutzen, um Dateien zu manipulieren, um Informationen offenzulegen, und um Sicherheitsvorkehrungen zu umgehen.
01
describes (16)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-3691US | — | — | ||
OpenClaw Client PKCE Verifier Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose stored credentials on affected installations of OpenClaw.… | ||||
| CVE-2026-35632US | high7.8 | — | ||
OpenClaw through 2026.2.22 contains a symlink traversal vulnerability in agents.create and agents.update handlers that use fs.appendFile on IDENTITY.md without symlink containment… | ||||
| CVE-2026-32012US | — | — | ||
Rejected reason: This CVE ID has been rejected. | ||||
| CVE-2026-32899US | —OT elevated | — | ||
OpenClaw versions prior to 2026.2.25 fail to consistently apply sender-policy checks to reaction_* and pin_* non-message events before adding them to system-event context. Attacker… | ||||
| CVE-2026-32898US | —OT elevated | — | ||
OpenClaw versions prior to 2026.2.23 contain an authorization bypass vulnerability in the ACP client that auto-approves tool calls based on untrusted toolCall.kind metadata and per… | ||||
| CVE-2026-32065US | medium6.5OT elevated | — | ||
OpenClaw versions prior to 2026.2.25 contain an approval-integrity bypass vulnerability in system.run where rendered command text is used as approval identity while trimming argv t… | ||||
| CVE-2026-32057US | — | — | ||
OpenClaw versions prior to 2026.2.25 contain an authentication bypass vulnerability in the trusted-proxy Control UI pairing mechanism that accepts client.id=control-ui without prop… | ||||
| CVE-2026-32054US | high7.8 | — | ||
OpenClaw versions prior to 2026.2.25 contain a symlink traversal vulnerability in browser trace and download output path handling that allows local attackers to escape the managed… | ||||
| CVE-2026-32050US | medium5.3OT elevated | — | ||
OpenClaw versions prior to 2026.2.25 contain an access control vulnerability in signal reaction notification handling that allows unauthorized senders to enqueue status events befo… | ||||
| CVE-2026-32043US | high7.0 | — | ||
OpenClaw versions prior to 2026.2.25 contain a time-of-check-time-of-use vulnerability in approval-bound system.run execution where the cwd parameter is validated at approval time… | ||||
| CVE-2026-32042US | —OT elevated | — | ||
OpenClaw versions 2026.2.22 prior to 2026.2.25 contain a privilege escalation vulnerability allowing unpaired device identities to bypass operator pairing requirements and self-ass… | ||||
| CVE-2026-32028US | —OT elevated | — | ||
OpenClaw versions prior to 2026.2.25 fail to enforce dmPolicy and allowFrom authorization checks on Discord direct-message reaction notifications, allowing non-allowlisted users to… | ||||
| CVE-2026-32025US | high7.5 | — | ||
OpenClaw versions prior to 2026.2.25 contain an authentication hardening gap in browser-origin WebSocket clients that allows attackers to bypass origin checks and auth throttling o… | ||||
| CVE-2026-32013US | — | Exploit | ||
OpenClaw versions prior to 2026.2.25 contain a symlink traversal vulnerability in the agents.files.get and agents.files.set methods that allows reading and writing files outside th… | ||||
| CVE-2026-32005US | high8.1OT elevated | — | ||
OpenClaw versions prior to 2026.2.25 fail to enforce sender authorization checks for interactive callbacks including block_action, view_submission, and view_closed in shared worksp… | ||||
| CVE-2026-28449US | —OT elevated | — | ||
OpenClaw versions prior to 2026.2.25 lack durable replay state for Nextcloud Talk webhook events, allowing valid signed webhook requests to be replayed without suppression. Attacke… | ||||
02
references
External citations — patches, advisories, analysis.
- GitHub Security Advisory GHSA-354r-7mfh-7rh2 vom 2026-02-25external
- GitHub Security Advisory GHSA-36h3-7c54-j27r vom 2026-02-25external
- GitHub Security Advisory GHSA-3jx4-q2m7-r496 vom 2026-02-25external
- GitHub Security Advisory GHSA-553v-f69r-656j vom 2026-02-25external
- GitHub Security Advisory GHSA-6g25-pc82-vfwp vom 2026-02-25external
- GitHub Security Advisory GHSA-792q-qw95-f446 vom 2026-02-25external
- GitHub Security Advisory GHSA-7jx5-9fjg-hp4m vom 2026-02-25external
- GitHub Security Advisory GHSA-fgvx-58p6-gjwc vom 2026-02-25external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan