Vulnerabilities

TI-2026-31718 CVE-2026-43584 · GHSA-vfp4-8x56-j7c5

OpenClaw < 2026.4.10 - Insufficient Environment Variable Denylist in Exec Policy

MEDIUM 40

OpenClaw before 2026.4.10 contains an insufficient environment variable denylist vulnerability in its exec environment policy that allows operator-supplied overrides of high-risk interpreter startup variables including V…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00392 Published 2026-05-06 Fixed in 2026.4.10 CWE-184

TI-2026-31716 CVE-2026-43582 · GHSA-xq94-r468-qwgj

OpenClaw < 2026.4.10 - DNS Rebinding SSRF via Hostname Validation Bypass

LOW 22

OpenClaw before 2026.4.10 contains a server-side request forgery vulnerability in browser navigation policy that allows attackers to bypass hostname validation through DNS rebinding attacks.

CVSS 4.0MEDIUM 4.9 Network Low privileges No interaction EPSS 0.00199 Published 2026-05-06 Fixed in 2026.4.10 CWE-367

TI-2026-31715 CVE-2026-43581 · GHSA-xmv5-r8v7-g6g5

OpenClaw < 2026.4.10 - Chrome DevTools Protocol Exposure via Overly Broad CDP Relay Binding

MEDIUM 40

OpenClaw before 2026.4.10 contains an improper network binding vulnerability in the sandbox browser CDP relay that exposes Chrome DevTools Protocol on 0.0.0.0.

CVSS 4.0CRITICAL 9.0 Adjacent network No auth No interaction EPSS 0.00214 Published 2026-05-06 Fixed in 2026.4.10 CWE-1188

TI-2026-31714 CVE-2026-43580 · GHSA-536q-mj95-h29h

OpenClaw < 2026.4.10 - Incomplete Navigation Guard Coverage in Browser Interactions

LOW 22

OpenClaw before 2026.4.10 contains an incomplete navigation guard vulnerability that allows attackers to trigger navigation without complete SSRF policy enforcement.

CVSS 4.0MEDIUM 4.9 Network Low privileges No interaction EPSS 0.00264 Published 2026-05-06 Fixed in 2026.4.10 CWE-862

TI-2026-31713 CVE-2026-43579 · GHSA-gq8x-6m4q-4rg7

OpenClaw < 2026.4.10 - Insufficient Access Control in Nostr Profile Mutation Routes

LOW 26

OpenClaw before 2026.4.10 contains an insufficient access control vulnerability in Nostr plugin HTTP profile routes that allows operators with write permissions to persist profile configuration without requiring admin au…

CVSS 4.0MEDIUM 6.0 Network Low privileges No interaction EPSS 0.00218 Published 2026-05-06 Fixed in 2026.4.10 CWE-862

TI-2026-31712 CVE-2026-43578 · GHSA-mw7v-rxqg-f85m

OpenClaw 2026.3.31 < 2026.4.10 - Privilege Escalation via Missed Async Exec Completion…

MEDIUM 47

OpenClaw versions 2026.3.31 before 2026.4.10 contain a privilege escalation vulnerability where heartbeat owner downgrade detection misses local background async exec completion events.

CVSS 4.0CRITICAL 9.1 Network No auth No interaction EPSS 0.00288 Published 2026-05-06 Fixed in 2026.4.10 CWE-184

TI-2026-31709 CVE-2026-43575 · GHSA-xm83-jc96-gw22

OpenClaw 2026.2.21 < 2026.4.10 - Authentication Bypass in Sandbox noVNC Helper Route

MEDIUM 48

OpenClaw versions 2026.2.21 before 2026.4.10 contain an authentication bypass vulnerability in the sandbox noVNC helper route that exposes interactive browser session credentials.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00401 Published 2026-05-06 Fixed in 2026.4.10 CWE-862