Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: OpenClaw 2026.2.23 Clear all filters
TI-2026-17827 CVE-2026-22217 · GHSA-p4wh-cr8m-gm6c

OpenClaw 2026.2.22 < 2026.2.23 - Arbitrary Binary Execution via $SHELL Environment Variable Trusted Prefix Fallback

Priority LOW 25

OpenClaw version 2026.2.22 prior to 2026.2.23 contains an arbitrary code execution vulnerability in shell-env that allows attackers to execute attacker-controlled binaries by exploiting trusted-prefix fallback logic for…

CVSS 4.0MEDIUM 5.8 Local Low privileges No interaction EPSS 0.00133 Published 2026-03-18 Fixed in 2026.2.23 CWE-829
TI-2026-17785 CVE-2026-22175 · GHSA-gwqp-86q6-w47g

OpenClaw < 2026.2.23 - Exec Approval Bypass via Unrecognized Multiplexer Shell Wrappers

Priority LOW 31

OpenClaw versions prior to 2026.2.23 contain an exec approval bypass vulnerability in allowlist mode where allow-always grants could be circumvented through unrecognized multiplexer shell wrappers like busybox and toybox…

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00354 Published 2026-03-18 Fixed in 2026.2.23 CWE-184