Vulnerabilities

TI-2026-32860 CVE-2026-45002 · GHSA-2xcp-x87w-q377

OpenClaw < 2026.4.20 - Hook Session-Key Bypass via Template Mapping

LOW 34

OpenClaw before 2026.4.20 contains a hook session-key bypass vulnerability that allows attackers to circumvent the hooks.allowRequestSessionKey opt-in restriction.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.0028 Published 2026-05-11 Fixed in 2026.4.20 CWE-863

TI-2026-32859 CVE-2026-45001 · GHSA-9fc9-8v4x-f5cp

OpenClaw < 2026.4.20 - Gateway Config Mutation Guard Bypass via Agent Tool Access

LOW 26

OpenClaw before 2026.4.20 contains a guard bypass vulnerability in the agent-facing gateway config.patch and config.apply endpoints that fails to protect operator-trusted settings including sandbox policy, plugin enablem…

CVSS 4.0MEDIUM 6.0 Network Low privileges No interaction EPSS 0.00218 Published 2026-05-11 Fixed in 2026.4.20 CWE-862

TI-2026-32858 CVE-2026-45000 · GHSA-5w5h-c32q-r6w9

OpenClaw < 2026.4.20 - Server-Side Request Forgery via Browser CDP Profile Creation

LOW 12

OpenClaw before 2026.4.20 contains a server-side request forgery vulnerability in browser CDP profile creation that skips strict-mode SSRF policy checks.

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.00246 Published 2026-05-11 Fixed in 2026.4.20 CWE-918

TI-2026-32857 CVE-2026-44999 · GHSA-57r2-h2wj-g887

OpenClaw < 2026.4.20 - Improper Trust Labeling in Isolated Cron Awareness Events

LOW 33

OpenClaw before 2026.4.20 fails to properly preserve untrusted labels for isolated cron awareness events, allowing webhook-triggered cron agent output to be recorded as trusted system events.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00151 Published 2026-05-11 Fixed in 2026.4.20 CWE-345

TI-2026-32856 CVE-2026-44998 · GHSA-fr55-95rr-vm5x

OpenClaw < 2026.4.20 - Tool Policy Bypass via Bundled MCP/LSP Tools

LOW 13

OpenClaw before 2026.4.20 contains a tool policy bypass vulnerability allowing bundled MCP and LSP tools to circumvent configured tool restrictions.

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.00706 Published 2026-05-11 Fixed in 2026.4.20 CWE-863

TI-2026-32853 CVE-2026-44995 · GHSA-mj59-h3q9-ghfh

OpenClaw < 2026.4.20 - Arbitrary Code Execution via MCP stdio Environment Variables

LOW 25

OpenClaw before 2026.4.20 contains an improper environment variable validation vulnerability in MCP stdio server configuration that allows attackers to execute arbitrary code.

CVSS 4.0MEDIUM 5.4 Local Low privileges User interaction EPSS 0.00136 Published 2026-05-11 Fixed in 2026.4.20 CWE-829

TI-2026-32851 CVE-2026-44993 · GHSA-hf7p-489h-xhj4

OpenClaw < 2026.4.20 - Direct Message Misclassification in Feishu Card Actions

LOW 12

OpenClaw before 2026.4.20 contains a message classification vulnerability in Feishu card-action callbacks that misclassifies direct messages as group conversations.

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.00265 Published 2026-05-11 Fixed in 2026.4.20 CWE-184

TI-2026-32850 CVE-2026-44992 · GHSA-h2vw-ph2c-jvwf

OpenClaw 2026.4.5 through 2026.4.19 - MiniMax API Host Override via Workspace dotenv

LOW 18

OpenClaw versions 2026.4.5 before 2026.4.20 contain an environment variable injection vulnerability allowing workspace dotenv to override MINIMAX_API_HOST.

CVSS 4.0MEDIUM 4.1 Local Low privileges User interaction EPSS 0.00119 Published 2026-05-11 Fixed in 2026.4.20 CWE-441

Vulnerabilities

Filters