Vulnerabilities
Last updated 2 hours ago
| Package | Summary | Severity | Published | Modified |
|---|---|---|---|---|
openclaw
|
OpenClaw is vulnerable to Path Traversal through path validation bypass | High Risk 7.5 | 7 months ago | 12 hours ago |
|
openclaw
|
OpenClaw: Browser CDP discovery could accept blocked WebSocket URLs | High Risk 8.5 | 15 days ago | 15 days ago |
|
@openclaw/feishu
|
OpenClaw: Channel read actions could skip target allowlists | Medium Risk 6.5 | 1 month ago | 1 month ago |
|
@openclaw/googlechat
|
OpenClaw: Channel read actions could skip target allowlists | Medium Risk 6.5 | 1 month ago | 1 month ago |
|
@openclaw/matrix
|
OpenClaw: Channel read actions could skip target allowlists | Medium Risk 6.5 | 1 month ago | 1 month ago |
|
@openclaw/msteams
|
OpenClaw: Channel read actions could skip target allowlists | Medium Risk 6.5 | 1 month ago | 1 month ago |
|
@memtensor/memos-cloud-openclaw-plugin
|
Malicious code in @memtensor/memos-cloud-openclaw-plugin (npm) | Unknown | 1 month ago | 1 month ago |
|
openclaw
|
OpenClaw voice-call media stream validated streams after upgrade, which could allow pre-start unauthenticated sockets to increase resource pressure | High Risk 7.5 | 8 months ago | 1 month ago |
|
@openclaw/voice-call
|
OpenClaw voice-call media stream validated streams after upgrade, which could allow pre-start unauthenticated sockets to increase resource pressure | High Risk 7.5 | 8 months ago | 1 month ago |
|
@openclaw/feishu
|
OpenClaw Feishu tools could ignore per-account disablement | High Risk 8.1 | 2 months ago | 2 months ago |
|
@openclaw/feishu
|
OpenClaw Feishu permission tools could ignore per-account disablement | High Risk 8.1 | 2 months ago | 2 months ago |
|
openclaw
|
OpenClaw: QQBot pre-dispatch slash commands could skip allowFrom checks | High Risk 7.5 | 4 months ago | 2 months ago |
|
openclaw
|
OpenClaw: Mattermost handlers could fall open when channel type was missing | Low Risk 3.7 | 4 months ago | 2 months ago |
|
openclaw
|
OpenClaw: Same-host trusted-proxy deployments could accept local forged identity headers | High Risk 7.7 | 4 months ago | 2 months ago |
|
openclaw
|
OpenClaw: QQBot streaming command could mutate config without explicit allowFrom | High Risk 7.7 | 4 months ago | 2 months ago |
|
openclaw
|
OpenClaw: Node pairing reconnection could confuse approval scope state | Critical 9.8 | 4 months ago | 2 months ago |
|
openclaw
|
OpenClaw's POSIX node system.run safe-bin allowlist could be widened by shell expansion | High Risk 7.1 | 4 months ago | 2 months ago |
|
openclaw
|
OpenClaw: PowerShell encoded-command aliases could miss exec allowlist checks | High Risk 8.8 | 4 months ago | 2 months ago |
|
openclaw
|
OpenClaw: Slack and Zalo webhook secrets could remain active after secrets.reload | Medium Risk 6.5 | 4 months ago | 2 months ago |
|
@ks-openclaw/kim
|
Malicious code in @ks-openclaw/kim (npm) | Unknown | 3 months ago | 3 months ago |
github.com/openclaw/crabbox
|
Crabbox: environment variable exposure vulnerability | Critical 9.1 | 5 months ago | 3 months ago |
|
@agenticmail/openclaw
|
AgenticMail: Unauthenticated inbound mail triggers bypassPermissions resume of the operator's Claude Code session (bridge-wake) | High Risk 8.0 | 4 months ago | 3 months ago |
|
openclaw
|
OpenClaw MCP SSE redirects could forward Authorization headers | Medium Risk 6.5 | 4 months ago | 3 months ago |
|
openclaw
|
OpenClaw: Bundle MCP loopback could miss its exec denylist on session spawn | Medium Risk 6.0 | 4 months ago | 3 months ago |
|
openclaw
|
OpenClaw: Exec approval display truncation could hide the command being approved | High Risk 8.0 | 4 months ago | 4 months ago |
|
openclaw
|
OpenClaw: Sandbox file operations use check-then-act, bypassing fd-based TOCTOU defenses | Medium Risk 6.0 | 7 months ago | 4 months ago |
|
openclaw
|
OpenClaw: Trusted-proxy Control UI WebSocket accepted client-declared scopes before pairing | High Risk 8.8 | 4 months ago | 4 months ago |
|
openclaw
|
OpenClaw: Silent privilege escalation via gateway shared-auth reconnect | Critical 9.5 | 7 months ago | 4 months ago |
|
openclaw
|
OpenClaw: BlueBubbles Group Reactions Bypass requireMention and Still Enqueue Agent-Visible System Events | Medium Risk 6.0 | 7 months ago | 4 months ago |
|
openclaw
|
OpenClaw: Sandbox browser CDP relay could expose DevTools protocol on 0.0.0.0 | High Risk 8.0 | 6 months ago | 4 months ago |
|
openclaw
|
OpenClaw: Trusted retry endpoint checks could match hostname prefixes | High Risk 8.0 | 4 months ago | 4 months ago |
|
openclaw
|
OpenClaw Canvas Authentication Bypass Vulnerability | High Risk 7.4 | 8 months ago | 4 months ago |
|
openclaw
|
OpenClaw's Trusted-proxy Control UI sessions retain privileged scopes without device identity on device-less allow paths | High Risk 8.0 | 7 months ago | 4 months ago |
|
openclaw
|
OpenClaw: Browser interaction routes could pivot into local CDP and regain file reads | Medium Risk 6.0 | 6 months ago | 4 months ago |
|
openclaw
|
OpenClaw's exec allowlist analysis rejects shell expansion in unquoted heredocs | Medium Risk 6.0 | 6 months ago | 4 months ago |
|
openclaw
|
OpenClaw: Telegram interactive callbacks could skip commands.allowFrom | High Risk 8.0 | 4 months ago | 4 months ago |
|
openclaw
|
OpenClaw: `session_status` sessionId resolution bypasses sandboxed session-tree visibility | High Risk 8.0 | 7 months ago | 4 months ago |
|
openclaw
|
OpenClaw: Native command authorization could skip owner-command enforcement | High Risk 8.0 | 4 months ago | 4 months ago |
|
openclaw
|
OpenClaw contains a symlink traversal vulnerability | Medium Risk 6.5 | 6 months ago | 4 months ago |
|
openclaw
|
OpenClaw affected by denial of service via unbounded URL-backed media fetch | High Risk 7.5 | 8 months ago | 4 months ago |
|
openclaw
|
OpenClaw Improperly Neutralizes Line Breaks in systemd Unit Generation Enables Local Command Execution (Linux) | High Risk 8.0 | 8 months ago | 4 months ago |
|
openclaw
|
OpenClaw: macOS beta onboarding exposed PKCE verifier via OAuth state | Medium Risk 6.0 | 8 months ago | 4 months ago |
|
openclaw
|
OpenClaw: Command-authorized non-owners could reach owner-only `/config` and `/debug` surfaces | High Risk 8.8 | 7 months ago | 4 months ago |
|
openclaw
|
OpenClaw: Webchat audio embedding could read local files without local-root containment | Medium Risk 6.0 | 6 months ago | 4 months ago |
|
openclaw
|
OpenClaw: message.action forwarding could send Gateway credentials to model-supplied loopback URLs | Medium Risk 6.0 | 4 months ago | 4 months ago |
|
openclaw
|
OpenClaw: QMD memory_get restricts reads to canonical or indexed memory paths | Medium Risk 6.0 | 6 months ago | 4 months ago |
|
openclaw
|
OpenClaw: Feishu card actions could misclassify DMs and skip dmPolicy | Medium Risk 6.0 | 6 months ago | 4 months ago |
|
openclaw
|
OpenClaw: Zalo replay dedupe cache could suppress events across authenticated webhook targets | Low Risk 3.0 | 7 months ago | 4 months ago |
|
openclaw
|
OpenClaw: `session_status` still bypasses configured `tools.sessions.visibility` for unsandboxed invocations | Medium Risk 6.0 | 7 months ago | 4 months ago |
|
openclaw
|
OpenClaw: Telegram legacy allowFrom migration fans default-account trust into all named accounts | Medium Risk 6.0 | 7 months ago | 4 months ago |
Page 1