Vulnerability GHSA-w5ww-7chg-mxcq
Advisory details are being prepared in the background.
High Risk
HIGH RISK
CVSS Score: 8.0
Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
4 months ago
July 02, 2026 at 05:18 PM UTC
OpenClaw: Telegram interactive callbacks could skip commands.allowFrom
0.0.1 - 2026.5.6-beta.1
0.0.1 - 2026.5.6-beta.1
Related Vulnerabilities
Other vulnerabilities affecting the same packages
High Risk
15 days ago
OpenClaw: Browser CDP discovery could accept blocked WebSocket URLs
0.0.1 - 2026.6.6-beta.2 GHSA-3x84-qq85-fj65
0.0.1 - 2026.6.6-beta.2 GHSA-3x84-qq85-fj65
High Risk
4 months ago
OpenClaw: Native command authorization could skip owner-command enforcement
0.0.1 - 2026.5.6-beta.1 GHSA-p73f-w79w-jqr5
0.0.1 - 2026.5.6-beta.1 GHSA-p73f-w79w-jqr5
High Risk
4 months ago
OpenClaw: PowerShell encoded-command aliases could miss exec allowlist checks
0.0.1 - 2026.5.12-beta.8 GHSA-j472-gf56-x589
0.0.1 - 2026.5.12-beta.8 GHSA-j472-gf56-x589
High Risk
4 months ago
OpenClaw: Trusted retry endpoint checks could match hostname prefixes
0.0.1 - 2026.5.7-beta.1 GHSA-77q5-rr5v-x43q
0.0.1 - 2026.5.7-beta.1 GHSA-77q5-rr5v-x43q
High Risk
4 months ago
OpenClaw: Matrix allowFrom could bind to mutable display names
0.0.1 - 2026.5.7-beta.1 GHSA-7hxm-f538-3xp6
0.0.1 - 2026.5.7-beta.1 GHSA-7hxm-f538-3xp6
Impacted packages
Timeline
Published
4 months ago
July 02, 2026 at 05:18 PM UTC
Fixed (2026.5.6)
6 months ago
May 06, 2026 at 05:33 PM UTC
Last Modified
4 months ago
July 08, 2026 at 08:26 AM UTC