Open Source OpenClaw <2026.3.31

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

2critical2high7medium0low

updated 2026-10-27

vulnerabilities (52)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-41364US	—	0.53% (45th)	—	no fix	2026-04-28	—
CVE-2026-41405US	—	0.48% (41st)	—	no fix	2026-04-28	—
CVE-2026-41374US	—	0.47% (41st)	—	no fix	2026-04-28	—
CVE-2026-41349US	—OT elevated	0.47% (41st)	—	no fix	2026-04-23	—
CVE-2026-41397US	critical9.6	0.47% (41st)	—	no fix	2026-04-28	—
CVE-2026-41343US	—	0.46% (40th)	—	no fix	2026-04-23	—
CVE-2026-41378US	—OT elevated	0.45% (38th)	—	no fix	2026-04-28	—
CVE-2026-41370US	—	0.42% (36th)	—	no fix	2026-04-28	—
CVE-2026-41333US	—	0.39% (33rd)	—	no fix	2026-04-23	—
CVE-2026-41408US	medium6.5	0.34% (28th)	—	no fix	2026-04-28	—
CVE-2026-41404US	—OT elevated	0.34% (27th)	—	no fix	2026-04-28	—
CVE-2026-41353US	—OT elevated	0.34% (27th)	—	no fix	2026-04-23	—
CVE-2026-41375US	—OT elevated	0.33% (26th)	—	no fix	2026-04-28	—
CVE-2026-41386US	critical9.8	0.33% (26th)	—	no fix	2026-04-28	—
CVE-2026-41334US	—	0.32% (24th)	—	no fix	2026-04-23	—
CVE-2026-41369US	—	0.31% (23rd)	—	no fix	2026-04-28	—
CVE-2026-41329US	—OT elevated	0.30% (22nd)	—	no fix	2026-04-21	—
CVE-2026-41335US	—	0.30% (22nd)	—	no fix	2026-04-23	—
CVE-2026-41331US	—	0.30% (22nd)	—	no fix	2026-04-21	—
CVE-2026-41345US	—	0.30% (22nd)	—	no fix	2026-04-23	—
CVE-2026-41394US	—OT elevated	0.29% (21st)	—	no fix	2026-04-28	—
CVE-2026-41340US	—	0.28% (20th)	—	no fix	2026-04-23	—
CVE-2026-41402US	medium5.4OT elevated	0.27% (18th)	—	no fix	2026-04-28	—
CVE-2026-41403US	medium4.0	0.26% (18th)	—	no fix	2026-04-28	—
CVE-2026-41300US	—	0.25% (17th)	—	no fix	2026-04-21	—
CVE-2026-41379US	—OT elevated	0.24% (15th)	—	no fix	2026-04-28	—
CVE-2026-41297US	—	0.24% (15th)	—	no fix	2026-04-21	—
CVE-2026-41359US	high8.8	0.23% (14th)	—	no fix	2026-04-23	—
CVE-2026-41377US	—	0.23% (14th)	—	no fix	2026-04-28	—
CVE-2026-41337US	—OT elevated	0.23% (14th)	—	no fix	2026-04-23	—
CVE-2026-41302US	medium6.3	0.22% (13th)	—	no fix	2026-04-21	—
CVE-2026-41406US	—OT elevated	0.22% (13th)	—	no fix	2026-04-28	—
CVE-2026-41382US	—OT elevated	0.22% (13th)	—	no fix	2026-04-28	—
CVE-2026-41381US	—OT elevated	0.22% (13th)	—	no fix	2026-04-28	—
CVE-2026-41385US	—OT elevated	0.21% (11th)	—	no fix	2026-04-28	—
CVE-2026-41296US	—	0.20% (10th)	—	no fix	2026-04-21	—
CVE-2026-41350US	—OT elevated	0.20% (10th)	—	no fix	2026-04-23	—
CVE-2026-41356US	—	0.19% (8th)	—	no fix	2026-04-23	—
CVE-2026-41366US	—	0.18% (8th)	—	no fix	2026-04-28	—
CVE-2026-41365US	—OT elevated	0.18% (7th)	—	no fix	2026-04-28	—
CVE-2026-41376US	medium6.5OT elevated	0.16% (5th)	—	no fix	2026-04-28	—
CVE-2026-41357US	—	0.15% (4th)	—	no fix	2026-04-23	—
CVE-2026-41336US	—	0.13% (3rd)	—	no fix	2026-04-23	—
CVE-2026-41373US	—	0.13% (3rd)	—	no fix	2026-04-28	—
CVE-2026-41396US	high7.8	0.13% (2nd)	—	no fix	2026-04-28	—
CVE-2026-41391US	medium6.1	0.13% (2nd)	—	no fix	2026-04-28	—
CVE-2026-41341US	—OT elevated	0.13% (2nd)	—	no fix	2026-04-23	—
CVE-2026-41330US	—	0.12% (2nd)	—	no fix	2026-04-21	—
CVE-2026-41355US	—	0.12% (2nd)	—	no fix	2026-04-23	—
CVE-2026-41393US	medium4.8	0.12% (2nd)	—	no fix	2026-04-28	—

showing 50 of 52

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-863Incorrect Authorization12 CVEs
CWE-269Improper Privilege Management5 CVEs
CWE-770Allocation of Resources Without Limits or Throttling5 CVEs
CWE-862Missing Authorization4 CVEs
CWE-346Origin Validation Error3 CVEs
CWE-367Time-of-check Time-of-use (TOCTOU) Race Condition3 CVEs
CWE-408Incorrect Behavior Order: Early Amplification3 CVEs
CWE-829Inclusion of Functionality from Untrusted Control Sphere3 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)52 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan