Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: OpenClaw 2026.6.6 Clear all filters
TI-2026-44426 CVE-2026-62203 · GHSA-q58p-x48c-c32c

OpenClaw < 2026.6.6 Environment Variable Injection via rustup

Priority LOW 36

OpenClaw versions before 2026.6.6 contain an environment variable filtering vulnerability in host exec that fails to properly sanitize rustup startup variables.

CVSS 4.0HIGH 7.7 Network Low privileges No interaction EPSS 0.00525 Published 2026-07-17 Fixed in 2026.6.6 CWE-184
TI-2026-44424 CVE-2026-62201 · GHSA-3fh8-p25m-jh6q

OpenClaw < 2026.6.6 Network Policy Bypass via exec-server

Priority LOW 22

OpenClaw versions before 2026.6.6 contain a network policy bypass vulnerability in the sandbox exec-server that allows lower-trust callers to reach internal network destinations blocked by OpenClaw policy.

CVSS 4.0MEDIUM 4.9 Network Low privileges No interaction EPSS 0.00361 Published 2026-07-17 Fixed in 2026.6.6 CWE-918