Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: OpenClaw 2026.3.1 Clear all filters
TI-2026-24591 CVE-2026-32051 · GHSA-x2pq-6fc2-wh58

OpenClaw < 2026.3.1 - Authorization Bypass in Agent Runs via Owner-Only Tool Access

Priority MEDIUM 40

OpenClaw versions prior to 2026.3.1 contain an authorization mismatch vulnerability that allows authenticated callers with operator.write scope to invoke owner-only tool surfaces including gateway and cron through agent…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00429 Published 2026-03-21 Fixed in 2026.3.1 CWE-863
TI-2026-24588 CVE-2026-32048 · GHSA-p7gr-f84w-hqg5

OpenClaw < 2026.3.1 - Sandbox Escape via Cross-Agent sessions_spawn

Priority LOW 35

OpenClaw versions prior to 2026.3.1 fail to enforce sandbox inheritance during cross-agent sessions_spawn operations, allowing sandboxed sessions to create child processes under unsandboxed agents.

CVSS 4.0HIGH 7.7 Network Low privileges No interaction EPSS 0.00299 Published 2026-03-21 Fixed in 2026.3.1 CWE-732