Vulnerabilities

TI-2026-32861 CVE-2026-45003 · GHSA-55cf-xx38-4p9p

OpenClaw < 2026.4.22 - Connector Endpoint Host Override via Workspace dotenv Files

LOW 18

OpenClaw before 2026.4.22 allows workspace dotenv files to override connector endpoint hosts for Matrix, Mattermost, IRC, and Synology connectors.

CVSS 4.0MEDIUM 4.1 Local Low privileges User interaction EPSS 0.00105 Published 2026-05-11 Fixed in 2026.4.22 CWE-441

TI-2026-32855 CVE-2026-44997 · GHSA-q3jj-46pq-826r

OpenClaw < 2026.4.22 - Security Envelope Constraint Bypass in ACP Child Sessions

LOW 11

OpenClaw before 2026.4.22 contains a security envelope constraint bypass vulnerability allowing restricted subagents to spawn ACP child sessions that fail to inherit depth, child-count limits, control scope, or target-ag…

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.00222 Published 2026-05-11 Fixed in 2026.4.22 CWE-266

TI-2026-32852 CVE-2026-44994 · GHSA-5hj5-7x2h-xhpr

OpenClaw < 2026.4.22 - Authentication Bypass in Gateway Control UI Bootstrap Config Endpoint

LOW 34

OpenClaw before 2026.4.22 contains an authentication bypass vulnerability in the Control UI bootstrap config endpoint that allows unauthenticated attackers to read sensitive configuration fields.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00317 Published 2026-05-11 Fixed in 2026.4.22 CWE-862

Vulnerabilities

Filters

OpenClaw < 2026.4.22 - Connector Endpoint Host Override via Workspace dotenv Files

OpenClaw < 2026.4.22 - Security Envelope Constraint Bypass in ACP Child Sessions

OpenClaw < 2026.4.22 - Authentication Bypass in Gateway Control UI Bootstrap Config Endpoint