Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: OpenClaw 2026.4.2 Clear all filters
TI-2026-30008 CVE-2026-41407 · GHSA-jj6q-rrrf-h66h

OpenClaw < 2026.4.2 - Timing Side Channel in Shared-Secret Comparison

Priority LOW 27

OpenClaw before 2026.4.2 contains a timing side channel vulnerability in shared-secret comparison call sites that use early length-mismatch checks instead of fixed-length comparison helpers.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00226 Published 2026-04-28 Fixed in 2026.4.2 CWE-208
TI-2026-29984 CVE-2026-41383 · GHSA-m34q-h93w-vg5x

OpenClaw < 2026.4.2 - Arbitrary Remote Directory Deletion via Mis-scoped Mirror Mode Paths

Priority LOW 27

OpenClaw before 2026.4.2 contains an arbitrary directory deletion vulnerability in mirror mode that allows attackers to delete remote directories by influencing remoteWorkspaceDir and remoteAgentWorkspaceDir configuratio…

CVSS 4.0MEDIUM 6.1 Network Low privileges No interaction EPSS 0.00371 Published 2026-04-28 Fixed in 2026.4.2 CWE-22