Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: OpenClaw 2026.2.21 Clear all filters
TI-2026-21928 CVE-2026-27524 · GHSA-62f6-mrcj-v8h5

OpenClaw < 2026.2.21 - Prototype Pollution via Debug Override Path

Priority LOW 12

OpenClaw versions prior to 2026.2.21 accept prototype-reserved keys in runtime /debug set override object values, allowing prototype pollution attacks.

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.00251 Published 2026-03-18 Fixed in 2026.2.21 CWE-1321
TI-2026-17779 CVE-2026-22168 · GHSA-5v6x-rfc3-7qfr

OpenClaw < 2026.2.21 - Command Injection via cmd.exe /c Trailing Arguments in system.run

Priority LOW 32

OpenClaw versions prior to 2026.2.21 contain an approval-integrity mismatch vulnerability in system.run that allows authenticated operators to execute arbitrary trailing arguments after cmd.exe /c while approval text ref…

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00431 Published 2026-03-18 Fixed in 2026.2.21 CWE-88