Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: OpenClaw 2026.5.26 Clear all filters
TI-2026-38855 CVE-2026-53859 · GHSA-gxg4-2rrr-jhc7

OpenClaw < 2026.5.26 - Hostname Validation Bypass via Trailing-Dot Inconsistency

Priority LOW 26

OpenClaw before 2026.5.26 contains a hostname validation vulnerability allowing attackers to bypass blocklist comparisons using trailing-dot notation in model or workspace-derived URLs.

CVSS 4.0MEDIUM 6.0 Network Low privileges No interaction EPSS 0.0021 Published 2026-06-16 Fixed in 2026.5.26 CWE-1023
TI-2026-38844 CVE-2026-53848 · GHSA-cwpp-5962-q4f6

OpenClaw < 2026.5.26 - Exec Allowlist Bypass via Transparent Command Wrappers

Priority LOW 11

OpenClaw before 2026.5.26 contains an exec allowlist bypass vulnerability allowing authenticated operators to execute wrapper-level side effects outside allowlisted command intent.

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.00185 Published 2026-06-16 Fixed in 2026.5.26 CWE-184