Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: OpenClaw 2026.5.18 Clear all filters
TI-2026-38812 CVE-2026-53816 · GHSA-3c6j-hq33-3jv4

OpenClaw < 2026.5.18 - Exec Lifecycle Event Forgery via Paired Node

Priority LOW 39

OpenClaw before 2026.5.18 contains an insufficient provenance validation vulnerability in node event handling that allows paired nodes to forge exec lifecycle events without system.run authorization.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00342 Published 2026-06-11 Fixed in 2026.5.18 CWE-862
TI-2026-38808 CVE-2026-53812 · GHSA-2hfg-4fh4-qp7f

OpenClaw < 2026.5.18 - Private-Network Navigation Bypass via Browser Act Interactions

Priority LOW 22

OpenClaw before 2026.5.18 contains a server-side request forgery vulnerability in browser control that allows authenticated users to bypass private-network navigation checks through Playwright act interactions.

CVSS 4.0MEDIUM 4.9 Network Low privileges No interaction EPSS 0.00247 Published 2026-06-11 Fixed in 2026.5.18 CWE-918