Read the docs

OpenClaw

Records679All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical29CVSS 9.0–10.0
CVSS high291CVSS 7.0–8.9

Exploited now

OpenClaw records in CISA KEV

No OpenClaw vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Openclaw 575 records HIGH Openclaw/feishu 2 records LOW Openclaw/voice-call 1 record MEDIUM

Records

2 records in Openclaw/feishu · all components

TI-2026-44411 CVE-2026-62188 · GHSA-gqfx-xr3c-xq42

OpenClaw < 2026.6.9 Feishu Authorization Bypass

Priority LOW 39

OpenClaw @openclaw/feishu versions 2026.6.6 and earlier contain an incorrect authorization vulnerability in which the Feishu permission tools could ignore per-account disablement settings.

CVSS 4.0HIGH 8.6 Network Low privileges No interaction EPSS 0.00367 Published 2026-07-13 Fixed in 2026.6.9 CWE-863
TI-2026-44410 CVE-2026-62187 · GHSA-mm88-h44m-w2gp

OpenClaw < 2026.6.9 Feishu tools Authorization Bypass

Priority LOW 39

OpenClaw Feishu tools (npm package @openclaw/feishu) in versions <= 2026.6.6 could ignore per-account disablement.

CVSS 4.0HIGH 8.6 Network Low privileges No interaction EPSS 0.00367 Published 2026-07-13 Fixed in 2026.6.9 CWE-863
Open these records in search →