Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: OpenClaw 2026.5.12 Clear all filters
TI-2026-38832 CVE-2026-53836 · GHSA-j472-gf56-x589

OpenClaw < 2026.5.12 - Allowlist Bypass via PowerShell Encoded-Command Aliases

Priority MEDIUM 40

OpenClaw before 2026.5.12 contains an allowlist bypass vulnerability in PowerShell encoded-command handling that allows attackers to execute encoded commands using abbreviated flag aliases not recognized by the allowlist…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00451 Published 2026-06-12 Fixed in 2026.5.12 CWE-184
TI-2026-38816 CVE-2026-53820 · GHSA-jxfq-h7pm-67ph

OpenClaw < 2026.5.12 - Exec Denylist Bypass in Bundle MCP Loopback Session Spawn

Priority LOW 29

OpenClaw before 2026.5.12 contains an exec denylist bypass vulnerability in the bundle MCP loopback session-spawn path that allows authenticated callers to bypass intended command restrictions.

CVSS 4.0MEDIUM 6.9 Local Low privileges No interaction EPSS 0.00094 Published 2026-06-12 Fixed in 2026.5.12 CWE-862