Vulnerabilities

TI-2026-29906 CVE-2026-41303 · GHSA-98hh-7ghg-x6rq

OpenClaw < 2026.3.28 - Authorization Bypass in Discord Text Approval Commands

MEDIUM 40

OpenClaw before 2026.3.28 contains an authorization bypass vulnerability in Discord text approval commands that allows non-approvers to resolve pending exec approvals.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00408 Published 2026-04-20 Fixed in 2026.3.28 CWE-863

TI-2026-29902 CVE-2026-41299 · GHSA-6xg4-82hv-cp6f

OpenClaw < 2026.3.28 - Client Identity Spoofing in chat.send Gateway Provenance Guard

LOW 31

OpenClaw before 2026.3.28 contains an authorization bypass vulnerability in the chat.send gateway method where ACP-only provenance fields are gated by self-declared client metadata from WebSocket handshake rather than ve…

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00203 Published 2026-04-20 Fixed in 2026.3.28 CWE-807

TI-2026-29897 CVE-2026-41294 · GHSA-8rh7-6779-cjqq

OpenClaw < 2026.3.28 - Environment Variable Injection via CWD .env File

LOW 38

OpenClaw before 2026.3.28 loads the current working directory .env file before trusted state-dir configuration, allowing environment variable injection.

CVSS 4.0HIGH 8.5 Local No auth User interaction EPSS 0.0013 Published 2026-04-20 Fixed in 2026.3.28 CWE-15

Vulnerabilities

Filters

OpenClaw < 2026.3.28 - Authorization Bypass in Discord Text Approval Commands

OpenClaw < 2026.3.28 - Client Identity Spoofing in chat.send Gateway Provenance Guard

OpenClaw < 2026.3.28 - Environment Variable Injection via CWD .env File