Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: OpenClaw 2026.5.18 Clear all filters
TI-2026-44452 CVE-2026-62229 · GHSA-74vp-c44x-892q

OpenClaw < 2026.5.18 Authorization Bypass via Glob Matching

Priority LOW 37

OpenClaw before 2026.5.18 contain an authorization bypass vulnerability in exec allowlist glob matching that allows lower-trust callers to execute actions beyond intended authorization.

CVSS 4.0HIGH 7.7 Network Low privileges No interaction EPSS 0.00716 Published 2026-07-17 Fixed in 2026.5.18 CWE-22
TI-2026-44448 CVE-2026-62225 · GHSA-xm8q-45rh-546c

OpenClaw < 2026.5.18 Authorization Bypass via Skill Command Dispatch

Priority LOW 12

OpenClaw versions before 2026.5.18 contain an authorization bypass vulnerability in skill command dispatch that allows lower-trust callers to execute or persist actions beyond their intended authorization.

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.00249 Published 2026-07-17 Fixed in 2026.5.18 CWE-863
TI-2026-44446 CVE-2026-62223 · GHSA-ww99-rc68-x2pj

OpenClaw < 2026.5.18 Authorization Bypass via Device-pair

Priority LOW 36

OpenClaw before 2026.5.18 contain an authorization bypass vulnerability in the device-pair approval feature that allows lower-trust callers to execute actions beyond their intended authorization.

CVSS 4.0HIGH 7.7 Network Low privileges No interaction EPSS 0.00451 Published 2026-07-17 Fixed in 2026.5.18 CWE-863