Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: OpenClaw 2026.6.1 Clear all filters
TI-2026-44434 CVE-2026-62211 · GHSA-xmvq-76g8-6jhm

OpenClaw < 2026.6.1 Credential Redaction Bypass via Trajectory Export

Priority LOW 18

OpenClaw versions before 2026.6.1 contain a credential redaction bypass vulnerability in the trajectory export feature that allows lower-trust callers to access data that should remain within trusted boundaries.

CVSS 4.0MEDIUM 4.1 Local Low privileges User interaction EPSS 0.0015 Published 2026-07-17 Fixed in 2026.6.1 CWE-532
TI-2026-44433 CVE-2026-62210 · GHSA-vq5x-r5hj-w7qc

OpenClaw < 2026.6.1 Denial of Service via Remote Media URLs

Priority LOW 27

OpenClaw versions before 2026.6.1 contain a denial of service vulnerability where remote media URLs can trigger slow-read attacks that exhaust gateway worker resources.

CVSS 4.0MEDIUM 6.0 Network Low privileges No interaction EPSS 0.0045 Published 2026-07-17 Fixed in 2026.6.1 CWE-770