Vulnerabilities

TI-2026-29961 CVE-2026-41360 · GHSA-v3p7-858r-pr8m

OpenClaw < 2026.4.2 - Approval Integrity Bypass in pnpm dlx Local Script Binding

LOW 25

OpenClaw before 2026.4.2 contains an approval integrity vulnerability in pnpm dlx that fails to bind local script operands consistently with pnpm exec flows.

CVSS 4.0MEDIUM 5.4 Local Low privileges User interaction EPSS 0.00091 Published 2026-04-23 Fixed in 2026.4.2 CWE-367

TI-2026-29959 CVE-2026-41358 · GHSA-qm77-8qjp-4vcm

OpenClaw < 2026.4.2 - Sender Allowlist Bypass via Slack Thread Context

LOW 11

OpenClaw before 2026.4.2 fails to filter Slack thread context by sender allowlist, allowing non-allowlisted messages to enter agent context.

CVSS 4.0LOW 2.3 Network No auth User interaction EPSS 0.0014 Published 2026-04-23 Fixed in 2026.4.2 CWE-346

TI-2026-29955 CVE-2026-41354 · GHSA-rxmx-g7hr-8mx4

OpenClaw < 2026.4.2 - Insufficient Scope in Zalo Webhook Replay Dedupe Keys

LOW 28

OpenClaw before 2026.4.2 contains an insufficient scope vulnerability in Zalo webhook replay dedupe keys that allows legitimate events from different conversations or senders to collide.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00278 Published 2026-04-23 Fixed in 2026.4.2 CWE-706

TI-2026-29940 CVE-2026-41339 · GHSA-2f7j-rp58-mr42

OpenClaw < 2026.4.2 - Information Disclosure via Gateway Connect Snapshot

LOW 24

OpenClaw before 2026.4.2 exposes configPath and stateDir metadata in Gateway connect success snapshots to non-admin authenticated clients.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00283 Published 2026-04-23 Fixed in 2026.4.2 CWE-497

Vulnerabilities

Filters

OpenClaw < 2026.4.2 - Approval Integrity Bypass in pnpm dlx Local Script Binding

OpenClaw < 2026.4.2 - Sender Allowlist Bypass via Slack Thread Context

OpenClaw < 2026.4.2 - Insufficient Scope in Zalo Webhook Replay Dedupe Keys

OpenClaw < 2026.4.2 - Information Disclosure via Gateway Connect Snapshot