DeutschShown in its original language — a full translation is planned for a future version.
OpenClaw: Mehrere Schwachstellen
view advisory published 2026-04-06
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in OpenClaw ausnutzen, um Daten zu manipulieren, Sicherheitsmechanismen zu umgehen oder einen Denial-of-Service-Zustand zu erzeugen..
01
describes (21)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-41407US | medium5.3 | — | ||
OpenClaw before 2026.4.2 contains a timing side channel vulnerability in shared-secret comparison call sites that use early length-mismatch checks instead of fixed-length compariso… | ||||
| CVE-2026-41400US | high7.5 | — | ||
OpenClaw before 2026.3.31 contains an incomplete fix for CVE-2026-32062 where the voice-call component parses large WebSocket frames before start validation. Remote attackers can s… | ||||
| CVE-2026-41398US | — | — | ||
OpenClaw before 2026.4.2 contains an improper access control vulnerability in the iOS A2UI bridge that treats generic local-network pages as trusted origins. Attackers can inject u… | ||||
| CVE-2026-41388US | — | — | ||
OpenClaw before 2026.3.31 contains a configuration management vulnerability where startup migration treats empty-array settings as missing values. Attackers can restart the applica… | ||||
| CVE-2026-41383US | — | — | ||
OpenClaw before 2026.4.2 contains an arbitrary directory deletion vulnerability in mirror mode that allows attackers to delete remote directories by influencing remoteWorkspaceDir… | ||||
| CVE-2026-41372US | — | — | ||
OpenClaw before 2026.4.2 fails to normalize trailing-dot localhost hosts in remote CDP discovery responses, allowing bypass of loopback protections. Attackers can craft hostile dis… | ||||
| CVE-2026-41362US | — | — | ||
OpenClaw versions 2026.2.19 before 2026.3.31 contain an improper cache isolation vulnerability in the Zalo webhook replay-dedupe mechanism that is shared across authenticated webho… | ||||
| CVE-2026-41360US | —OT elevated | — | ||
OpenClaw before 2026.4.2 contains an approval integrity vulnerability in pnpm dlx that fails to bind local script operands consistently with pnpm exec flows. Attackers can replace… | ||||
| CVE-2026-41358US | — | — | ||
OpenClaw before 2026.4.2 fails to filter Slack thread context by sender allowlist, allowing non-allowlisted messages to enter agent context. Attackers can inject unauthorized threa… | ||||
| CVE-2026-41354US | medium5.3 | — | ||
OpenClaw before 2026.4.2 contains an insufficient scope vulnerability in Zalo webhook replay dedupe keys that allows legitimate events from different conversations or senders to co… | ||||
| CVE-2026-41352US | —OT elevated | — | ||
OpenClaw before 2026.3.31 contains a remote code execution vulnerability where a device-paired node can bypass the node scope gate authentication mechanism. Attackers with device p… | ||||
| CVE-2026-41351US | —OT elevated | — | ||
OpenClaw before 2026.3.31 contains a replay detection bypass vulnerability in webhook signature handling that treats Base64 and Base64URL encoded signatures as distinct requests. A… | ||||
| CVE-2026-41348US | —OT elevated | — | ||
OpenClaw before 2026.3.31 contains an authorization bypass vulnerability in Discord slash command and autocomplete paths that fail to enforce group DM channel allowlist restriction… | ||||
| CVE-2026-41346US | high7.5 | — | ||
OpenClaw 2026.2.26 before 2026.3.31 enforces pending pairing-request caps per channel file instead of per account, allowing attackers to exhaust the shared pending window. Remote a… | ||||
| CVE-2026-41339US | — | — | ||
OpenClaw before 2026.4.2 exposes configPath and stateDir metadata in Gateway connect success snapshots to non-admin authenticated clients. Non-admin clients can recover host-specif… | ||||
| CVE-2026-41301US | — | — | ||
OpenClaw versions 2026.3.22 before 2026.3.31 contain a signature verification bypass vulnerability in the Nostr DM ingress path that allows pairing challenges to be issued before e… | ||||
| CVE-2026-41298US | —OT elevated | — | ||
OpenClaw before 2026.4.2 fails to enforce write scopes on the POST /sessions/:sessionKey/kill endpoint in identity-bearing HTTP modes. Read-scoped callers can terminate running sub… | ||||
| CVE-2026-41295US | — | — | ||
OpenClaw before 2026.4.2 contains an improper trust boundary vulnerability allowing untrusted workspace channel shadows to execute during built-in channel setup and login. Attacker… | ||||
| CVE-2026-34511US | medium5.9OT elevated | — | ||
OpenClaw before 2026.4.2 reuses the PKCE verifier as the OAuth state parameter in the Gemini OAuth flow, exposing it through the redirect URL. Attackers who capture the redirect UR… | ||||
| CVE-2026-34426US | high7.3 | — | ||
OpenClaw versions prior to commit b57b680 contain an approval bypass vulnerability due to inconsistent environment variable normalization between approval and execution paths, allo… | ||||
showing 20 of 21
02
references
External citations — patches, advisories, analysis.
- GitHub Security Advisory GHSA-2w79-r9g8-wmcr vom 2026-04-06external
- GitHub Security Advisory GHSA-37v6-fxx8-xjmx vom 2026-04-06external
- GitHub Security Advisory GHSA-3pm9-5j7m-59vc vom 2026-04-06external
- GitHub Security Advisory GHSA-rvvf-6vh3-9j43 vom 2026-04-06external
- GitHub Security Advisory GHSA-xj9w-5r6q-x6v4 vom 2026-04-06external
- GitHub Security Advisory GHSA-2f7j-rp58-mr42 vom 2026-04-06external
- GitHub Security Advisory GHSA-2qrv-rc5x-2g2h vom 2026-04-06external
- GitHub Security Advisory GHSA-4p4f-fc8q-84m3 vom 2026-04-06external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan