Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: OpenClaw 2026.5.26 Clear all filters
TI-2026-44450 CVE-2026-62227 · GHSA-fc43-vcvc-5qg7

OpenClaw 2026.4.14 < 2026.5.26 SSRF via Browser Snapshot

Priority LOW 23

OpenClaw 2026.4.14 before 2026.5.26 contain a server-side request forgery vulnerability in browser snapshot routes that fail to validate post-navigation destinations.

CVSS 4.0MEDIUM 4.9 Network Low privileges No interaction EPSS 0.00392 Published 2026-07-17 Fixed in 2026.5.26 CWE-918
TI-2026-44443 CVE-2026-62220 · GHSA-vfpw-6fgp-w7h6

OpenClaw 2026.2.25 < 2026.5.26 WebSocket Rate Limit Bypass

Priority LOW 35

OpenClaw 2026.2.25 before 2026.5.26 allow a lower-trust caller or configured input path to bypass non-browser rate limits on WebSocket authentication attempts.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00518 Published 2026-07-17 Fixed in 2026.5.26 CWE-307