DeutschShown in its original language — a full translation is planned for a future version.
OpenClaw: Mehrere Schwachstellen
view advisory published 2026-03-30
Ein Angreifer kann mehrere Schwachstellen in OpenClaw ausnutzen, um erweiterte Rechte zu erlangen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen oder andere, nicht näher spezifizierte Angriffe durchzuführen.
01
describes (18)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-41395US | —OT elevated | — | ||
OpenClaw before 2026.3.28 contains a webhook replay vulnerability in Plivo V3 signature verification that canonicalizes query ordering for signatures but hashes raw URLs for replay… | ||||
| CVE-2026-41380US | —OT elevated | — | ||
OpenClaw before 2026.3.28 contains an execution approval vulnerability in exec-approvals-allowlist.ts that allows allow-always persistence to trust wrapper carrier executables inst… | ||||
| CVE-2026-41371US | —OT elevated | — | ||
OpenClaw before 2026.3.28 contains a privilege escalation vulnerability in chat.send that allows write-scoped gateway callers to trigger admin-only session reset operations. Attack… | ||||
| CVE-2026-41368US | — | — | ||
OpenClaw before 2026.3.28 contains an environment variable disclosure vulnerability in the jq safe-bin policy that fails to block the $ENV filter. Attackers can bypass safe-bin res… | ||||
| CVE-2026-41367US | —OT elevated | — | ||
OpenClaw versions 2026.2.14 through 2026.3.24 fail to consistently apply guild and channel policy gates to Discord button and component interactions. Attackers can trigger privileg… | ||||
| CVE-2026-41361US | — | — | ||
OpenClaw before 2026.3.28 contains an SSRF guard bypass vulnerability that fails to block four IPv6 special-use ranges. Attackers can exploit this by crafting URLs targeting intern… | ||||
| CVE-2026-41344US | high8.8OT elevated | — | ||
OpenClaw before 2026.3.28 contains a privilege escalation vulnerability in the chat.send endpoint that allows write-scoped gateway callers to persist admin-only verboseLevel sessio… | ||||
| CVE-2026-41342US | high8.1OT elevated | — | ||
OpenClaw before 2026.3.28 contains an authentication bypass vulnerability in the remote onboarding component that persists unauthenticated discovery endpoints without explicit trus… | ||||
| CVE-2026-41332US | — | — | ||
OpenClaw before 2026.3.28 contains an environment variable sanitization vulnerability where GIT_TEMPLATE_DIR and AWS_CONFIG_FILE are not blocked in the host-env blocklist. Attacker… | ||||
| CVE-2026-41303US | —OT elevated | Exploit | ||
OpenClaw before 2026.3.28 contains an authorization bypass vulnerability in Discord text approval commands that allows non-approvers to resolve pending exec approvals. Attackers ca… | ||||
| CVE-2026-34504US | — | — | ||
OpenClaw before 2026.3.28 contains a server-side request forgery vulnerability in the fal provider image-generation-provider.ts component that allows attackers to fetch internal UR… | ||||
| CVE-2026-34503US | — | — | ||
OpenClaw before 2026.3.28 fails to disconnect active WebSocket sessions when devices are removed or tokens are revoked. Attackers with revoked credentials can maintain unauthorized… | ||||
| CVE-2026-33581US | high8.6 | — | ||
OpenClaw before 2026.3.24 contains a sandbox bypass vulnerability in the message tool that allows attackers to read arbitrary local files by using mediaUrl and fileUrl alias parame… | ||||
| CVE-2026-33580US | medium6.5 | — | ||
OpenClaw before 2026.3.28 contains a missing rate limiting vulnerability in the Nextcloud Talk webhook authentication that allows attackers to brute-force weak shared secrets. Atta… | ||||
| CVE-2026-33579US | —OT elevated | Exploit | ||
OpenClaw before 2026.3.28 contains a privilege escalation vulnerability in the /pair approve command path that fails to forward caller scopes into the core approval check. A caller… | ||||
| CVE-2026-33578US | medium4.3OT elevated | — | ||
OpenClaw before 2026.3.28 contains a sender policy bypass vulnerability in the Google Chat and Zalouser extensions where route-level group allowlist policies silently downgrade to… | ||||
| CVE-2026-33577US | —OT elevated | — | ||
OpenClaw before 2026.3.28 contains an insufficient scope validation vulnerability in the node pairing approval path that allows low-privilege operators to approve nodes with broade… | ||||
| CVE-2026-33576US | —OT elevated | — | ||
OpenClaw before 2026.3.28 downloads and stores inbound media from Zalo channels before validating sender authorization. Unauthorized senders can force network fetches and disk writ… | ||||
02
references
External citations — patches, advisories, analysis.
- Openclaw Github vom 2026-03-30external
- Openclaw Github vom 2026-03-30external
- Openclaw Github vom 2026-03-30external
- Openclaw Github vom 2026-03-30external
- Openclaw Github vom 2026-03-30external
- Openclaw Github vom 2026-03-30external
- Openclaw Github vom 2026-03-30external
- Openclaw Github vom 2026-03-30external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan