Anmelden
Deutsch English Español Polski
Kritisch

OpenClaw has a CWD `.env` environment variable injection which bypasses host-env policy and allows config takeover

  • Veröffentlicht: 01.04.2026
  • Aktualisiert: 11.10.2026 10:22

Summary

OpenClaw loaded the current working directory .env before trusted state-dir configuration, allowing untrusted workspace state to inject host environment values.

Impact

A repository or workspace containing a malicious .env file could override runtime configuration and security-sensitive environment settings when OpenClaw started there.

Affected Component

src/infra/dotenv.ts, src/cli/dotenv.ts

Fixed Versions

  • Affected: <= 2026.3.24
  • Patched: >= 2026.3.28
  • Latest stable 2026.3.28 contains the fix.

Fix

Fixed by commit 6a79324802 (Filter untrusted CWD .env entries before OpenClaw startup).

Betroffene Software

Klicken Sie auf eine Technologie, um alle zugehörigen Schwachstellen anzuzeigen.

PlattformPaketAnfällige VersionenBehoben in
npm-Paket openclaw < 2026.3.28 2026.3.28

Verweise

CVSS-Wert 9.6/10
CVSS-Vektor
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Schwäche (CWE)
CWE-426
Plattform
npm
Paket
openclaw
Veröffentlicht
01.04.2026
Aktualisiert
11.10.2026 10:22

Quellen und Lizenzen

OSV / GitHub Advisory Database - GHSA-8rh7-6779-cjqq - CC BY 4.0

Schwachstellenhistorie: openclaw

Alle veröffentlichten Schwachstellen dieses Pakets (npm-Paket), neueste zuerst. Zeigt, ob es ein einmaliger Ausrutscher ist oder ein Paket, das man im Auge behalten muss.

Alle (589) im Archiv
Einträge insgesamt
589
Erste → letzte
02.2026 10.2026
Ohne Fix
9
In Angriffen ausgenutzt
0

Verteilung nach Schweregrad

  • Kritisch 20
  • Hoch 215
  • Mittel 300
  • Niedrig 54

Veröffentlichungen pro Jahr

Schweregrad:
  1. OpenClaw: Native command authorization could skip owner-command enforcement
    Hoch CVE-2026-53828 < 2026.5.6 2026.5.6
  2. OpenClaw: PowerShell encoded-command aliases could miss exec allowlist checks
    Hoch · 8.8 CVE-2026-53836 < 2026.5.12 2026.5.12
  3. OpenClaw: Trusted retry endpoint checks could match hostname prefixes
    Hoch CVE-2026-53839 < 2026.5.7 2026.5.7
  4. OpenClaw: Telegram interactive callbacks could skip commands.allowFrom
    Hoch CVE-2026-53807 < 2026.5.6 2026.5.6
  5. OpenClaw: Matrix allowFrom could bind to mutable display names
    Hoch · 8.8 CVE-2026-53811 < 2026.5.7 2026.5.7
  6. OpenClaw: Paired nodes could forge exec lifecycle events without system.run provenance
    Hoch · 7.2 CVE-2026-53816 < 2026.5.18 2026.5.18
  7. OpenClaw: Combined POSIX shell options could confuse exec revalidation
    Hoch · 8.8 CVE-2026-53806 < 2026.5.12 2026.5.12
  8. OpenClaw: Fake package roots could influence memory-core artifact loading
    Hoch · 7.8 CVE-2026-53813 < 2026.4.25 2026.4.25
  9. OpenClaw: Workspace .env could override Homebrew executable selection for skill install flows
    Hoch · 8.8 CVE-2026-53819 < 2026.5.27 2026.5.27
  10. OpenClaw: QQBot pre-dispatch slash commands could skip allowFrom checks
    Hoch · 7.5 CVE-2026-53834 < 2026.4.27 2026.4.27
  11. OpenClaw: Non-owner chat senders could issue device-pairing bootstrap codes
    Hoch · 8.3 CVE-2026-32905 < 2026.5.4 2026.5.4
  12. OpenClaw: QQBot admin commands could skip DM-only and allowFrom policy
    Kritisch CVE-2026-34507 < 2026.4.29 2026.4.29
  13. OpenClaw: Trusted-proxy Control UI WebSocket accepted client-declared scopes before pairing
    Hoch · 8.8 CVE-2026-53821 < 2026.5.18 2026.5.18
  14. OpenClaw: Slack allowFrom could bind to mutable display names
    Hoch CVE-2026-53823 < 2026.5.3 2026.5.3
  15. OpenClaw: QQBot streaming command could mutate config without explicit allowFrom
    Hoch · 7.7 CVE-2026-53833 < 2026.4.29 2026.4.29
  16. OpenClaw: Scoped chat.send route inheritance could bypass admin command scope gates
    Hoch · 8.8 CVE-2026-35674 < 2026.5.18 2026.5.18
  17. OpenClaw's POSIX node system.run safe-bin allowlist could be widened by shell expansion
    Hoch · 7.1 CVE-2026-53831 < 2026.5.18 2026.5.18
  18. OpenClaw: QQBot native approval buttons did not enforce configured approver identity
    Hoch · 8.0 CVE-2026-35630 < 2026.5.18 2026.5.18
  19. OpenClaw: Hook-triggered CLI runs could receive owner MCP tool authority
    Hoch · 8.4 CVE-2026-53814 < 2026.5.20 2026.5.20
  20. OpenClaw: Control UI locality spoofing could mint a durable admin device token
    Hoch · 8.0 CVE-2026-53817 < 2026.5.22 2026.5.22
  21. OpenClaw: Same-host trusted-proxy deployments could accept local forged identity headers
    Hoch · 7.7 CVE-2026-53832 < 2026.5.18 2026.5.18
  22. OpenClaw's marketplace runtime extension metadata could point at unscanned payloads
    Hoch · 8.8 CVE-2026-53810 < 2026.5.18 2026.5.18
  23. OpenClaw: Shell wrapper argv could change between approval and execution
    Hoch CVE-2026-53822 < 2026.5.18 2026.5.18
  24. OpenClaw: Exec approval display truncation could hide the command being approved
    Hoch · 8.0 CVE-2026-53829 < 2026.5.18 2026.5.18
  25. OpenClaw: Message read actions could skip channel allowlist checks
    Hoch · 6.5 CVE-2026-53815 < 2026.5.19 2026.5.19
  26. OpenClaw: Workspace-derived service PATH could influence trash command selection
    Hoch · 7.1 CVE-2026-53865 < 2026.5.2 2026.5.2
  27. OpenClaw: Workspace .env STATE_DIRECTORY could influence bundled runtime dependency roots
    Hoch · 7.1 CVE-2026-53858 < 2026.5.2 2026.5.2
  28. OpenClaw: Discord allowFrom could bind to mutable display names
    Hoch · 8.1 CVE-2026-53849 < 2026.5.7 2026.5.7
  29. OpenClaw: Workspace .env npm_execpath could influence bundled runtime dependency install
    Hoch · 7.1 CVE-2026-53846 < 2026.4.29 2026.4.29
  30. OpenClaw: Linux and macOS exec allowlists skipped configured argument patterns
    Hoch · 7.1 CVE-2026-53853 < 2026.5.12 2026.5.12
  31. OpenClaw: Zalo allowFrom could bind to mutable display names
    Hoch · 8.1 CVE-2026-53857 < 2026.5.3 2026.5.3
  32. OpenClaw: Shell positional parameters could weaken strict inline-eval checks
    Hoch · 8.1 CVE-2026-53855 < 2026.4.2 2026.4.2
  33. OpenClaw: Workspace .env CLOUDSDK_PYTHON could influence Gmail setup gcloud execution
    Hoch · 7.1 CVE-2026-53842 < 2026.5.2 2026.5.2
  34. OpenClaw: Shell inline-command parsing could miss an allowlist check
    Hoch · 8.1 CVE-2026-53866 < 2026.5.12 2026.5.12
  35. OpenClaw: Pairing-scoped device session could restore revoked node token authority
    Hoch · 8.8 CVE-2026-53843 < 2026.5.26 2026.5.26
  36. OpenClaw: Host environment sanitizer missed two Node.js control variables
    Hoch · 8.1 CVE-2026-53864 < 2026.5.26 2026.5.26
  37. OpenClaw: MCP Streamable HTTP redirects could forward configured custom headers to another origin
    Hoch · 7.1 CVE-2026-53840 < 2026.5.12 2026.5.12
  38. OpenClaw's gateway config mutation guard allowed unsafe model-driven config writes
    Hoch · 8.8 CVE-2026-45006 < 2026.4.23 2026.4.23
  39. OpenClaw vulnerable to arbitrary code execution via attacker-controlled setup-api.js loaded from cwd during env-key resolution
    Hoch · 7.8 CVE-2026-45004 < 2026.4.23 2026.4.23
  40. OpenClaw: MCP loopback owner context is derived from server-issued bearer tokens
    Hoch · 7.8 CVE-2026-44118 < 2026.4.22 2026.4.22
  41. OpenClaw: Workspace dotenv could override runtime-control environment variables
    Hoch · 7.8 CVE-2026-44114 < 2026.4.20 2026.4.20
  42. OpenClaw: Feishu webhook and card-action validation now fail closed
    Kritisch · 9.8 CVE-2026-44109 < 2026.4.15 2026.4.15
  43. OpenClaw: Gateway HTTP endpoints re-resolve bearer auth after SecretRef rotation
    Kritisch · 8.1 CVE-2026-43585 < 2026.4.15 2026.4.15
  44. OpenClaw: QQBot media tags could read arbitrary local files through reply text
    Hoch CVE-2026-43533 < 2026.4.10 2026.4.10
  45. OpenClaw: busybox and toybox applet execution weakened exec approval binding
    Hoch · 8.8 CVE-2026-43530 >= 2026.2.23, < 2026.4.12 2026.4.12
  46. OpenClaw: Matrix profile config persistence was reachable from operator.write message tools
    Hoch · 6.5 CVE-2026-42433 < 2026.4.10 2026.4.10
  47. OpenClaw: Sandboxed agents could escape exec routing via host=node override
    Hoch · 8.8 CVE-2026-42434 >= 2026.4.5, < 2026.4.10 2026.4.10
  48. OpenClaw: Workspace provider auth choices could auto-enable untrusted provider plugins
    Hoch · 8.8 CVE-2026-43569 < 2026.4.9 2026.4.9
  49. OpenClaw: Sandbox browser CDP relay could expose DevTools protocol on 0.0.0.0
    Hoch CVE-2026-43581 < 2026.4.10 2026.4.10
  50. OpenClaw: Channel setup catalog lookups could include untrusted workspace plugin shadows
    Hoch · 8.8 CVE-2026-43571 < 2026.4.10 2026.4.10
  51. OpenClaw: Exec environment denylist missed high-risk interpreter startup variables
    Hoch · 8.8 CVE-2026-43584 < 2026.4.10 2026.4.10
  52. OpenClaw: Voice-call realtime WebSocket accepted oversized frames
    Hoch · 7.5 CVE-2026-42437 >= 2026.4.9, < 2026.4.10 2026.4.10
  53. OpenClaw: config.get redaction bypass through sourceConfig and runtimeConfig aliases
    Hoch CVE-2026-43528 < 2026.4.14 2026.4.14
  54. OpenClaw: `fetchWithSsrFGuard` replays unsafe request bodies across cross-origin redirects
    Hoch CVE-2026-40037 < 2026.4.8 2026.4.8
  55. OpenClaw: Node Pairing Reconnect Command Escalation Bypasses operator.admin Scope Requirement
    Hoch · 7.8 CVE-2026-42432 < 2026.4.8 2026.4.8
  56. OpenClaw: HGRCPATH, CARGO_BUILD_RUSTC_WRAPPER, RUSTC_WRAPPER, and MAKEFLAGS missing from exec env denylist — RCE via build tool env injection (GHSA-cm8v-2vh9-cxf3 class)
    Hoch CVE-2026-42427 < 2026.4.8 2026.4.8
  57. OpenClaw: Authenticated `/hooks/wake` and mapped `wake` payloads are promoted into the trusted `System:` prompt channel
    Hoch ghsa-jf56-mccx-5f3f < 2026.4.8 2026.4.8
  58. OpenClaw: Lower-trust background runtime output is injected into trusted `System:` events, and local async exec completion misses the intended `exec-event` downgrade
    Hoch ghsa-gfmx-pph7-g46x < 2026.4.8 2026.4.8
  59. OpenClaw: Gateway operator.write Can Reach Admin-Class Telegram Config and Cron Persistence via send
    Hoch · 7.1 CVE-2026-41359 < 2026.3.28 2026.3.28
  60. OpenClaw Has Incomplete Fix for CVE-2026-4039: CLI Backend Environment Variable Injection via Workspace Config
    Hoch · 7.8 CVE-2026-41384 < 2026.3.24 2026.3.24
  61. OpenClaw: Gemini OAuth exposed the PKCE verifier through the OAuth state parameter
    Hoch CVE-2026-34511 < 2026.4.2 2026.4.2
  62. OpenClaw: macOS Tailnet DNS Spoofing & Credential Exfiltration
    Hoch CVE-2026-41393 < 2026.3.31 2026.3.31
  63. OpenClaw: Unbound bootstrap setup codes allow privilege escalation during pairing
    Hoch · 9.8 CVE-2026-41386 < 2026.3.22 2026.3.22
  64. OpenClaw: Node browser proxy `allowProfiles` bypass through persistent profile mutation and runtime profile selection
    Hoch CVE-2026-41353 < 2026.3.22 2026.3.22
  65. OpenClaw: Paired node escalates to gateway RCE via unrestricted node.event agent dispatch
    Hoch · 8.8 CVE-2026-41378 < 2026.3.31 2026.3.31
  66. OpenClaw: Sandbox escape via TOCTOU race in remote FS bridge readFile
    Kritisch · 8.2 CVE-2026-41296 < 2026.3.31 2026.3.31
  67. OpenClaw: Host exec environment sanitization misses package, registry, Docker, compiler, and TLS override variables
    Hoch · 6.5 CVE-2026-41369 < 2026.3.31 2026.3.31
  68. OpenClaw: Incomplete scope-clearing fix allows operator.admin escalation via trusted-proxy auth mode
    Hoch CVE-2026-41404 < 2026.3.31 2026.3.31
  69. OpenClaw: Agentic Consent Bypass — LLM Agent Can Silently Disable Exec Approval via `config.patch`
    Hoch CVE-2026-41349 < 2026.3.28 2026.3.28
  70. OpenClaw: Incomplete host-env-security-policy allows untrusted model to substitute compiler binaries via env overrides
    Hoch · 6.1 CVE-2026-41373 < 2026.3.31 2026.3.31
  71. OpenClaw: Device-Paired Node Skips Node Scope Gate → Host RCE.md
    Hoch · 8.8 CVE-2026-41352 < 2026.3.31 2026.3.31
  72. OpenClaw: MS Teams webhook parses body before JWT validation, enabling unauthenticated resource exhaustion
    Hoch · 7.5 CVE-2026-41405 < 2026.3.31 2026.3.31
  73. OpenClaw: Self-Whitelisting in appendLocalMediaParentRoots Allows Arbitrary File Read & Credential Exfiltration
    Hoch CVE-2026-41366 < 2026.3.31 2026.3.31
  74. OpenClaw: OpenShell Mirror Sync — Sandbox Escape via Unrestricted File Sync + Symlink Traversal
    Hoch · 9.6 CVE-2026-41397 < 2026.3.31 2026.3.31
  75. OpenClaw: Workspace `.env` can override the bundled plugin trust root
    Hoch · 7.8 CVE-2026-41396 < 2026.3.31 2026.3.31
  76. OpenClaw: SSH sandbox tar upload follows symlinks, enabling arbitrary file write on remote host
    Hoch · 8.1 CVE-2026-41364 < 2026.3.31 2026.3.31
  77. OpenClaw: Workspace `.env` can override the bundled hooks root and load attacker hook code
    Hoch · 7.8 CVE-2026-41336 < 2026.3.31 2026.3.31
  78. OpenClaw: Heartbeat context inheritance bypasses sandbox via senderIsOwner escalation
    Kritisch CVE-2026-41329 < 2026.3.31 2026.3.31
  79. OpenClaw: PIP_INDEX_URL and UV_INDEX_URL bypass host exec env sanitization and redirect Python package-index traffic
    Hoch · 5.3 CVE-2026-41391 < 2026.3.31 2026.3.31
  80. OpenClaw has a CWD `.env` environment variable injection which bypasses host-env policy and allows config takeover dieser Eintrag
    Kritisch · 9.6 CVE-2026-41294 < 2026.3.28 2026.3.28
  81. OpenClaw gateway exec allow-always over-trusts positional carrier executables
    Hoch · 7.3 CVE-2026-41380 < 2026.3.28 2026.3.28
  82. OpenClaw Gateway `operator.write` can reach admin-only session reset via `chat.send` `/reset`
    Hoch CVE-2026-41371 < 2026.3.28 2026.3.28
  83. OpenClaw has a gateway exec allowlist allow-always bypass via unregistered /usr/bin/script wrapper
    Hoch · 7.3 CVE-2026-41390 < 2026.3.28 2026.3.28
  84. OpenClaw's incomplete host env sanitization blocklist allows supply-chain redirection via package-manager env overrides
    Hoch · 9.6 CVE-2026-41387 < 2026.3.22 2026.3.22
  85. OpenClaw: Gateway chat.send ACP-only provenance guard could be bypassed by client identity spoofing
    Hoch CVE-2026-41299 < 2026.3.28 2026.3.28
  86. OpenClaw safeBins jq `$ENV` filter bypass allows environment variable disclosure
    Hoch · 7.7 CVE-2026-41368 < 2026.3.28 2026.3.28
  87. OpenClaw's message tool media parameter bypasses tool policy filesystem isolation
    Hoch · 6.2 CVE-2026-33581 < 2026.3.24 2026.3.24
  88. OpenClaw: Discord text `/approve` bypasses `channels.discord.execApprovals.approvers` and allows non-approvers to resolve pending exec approvals
    Hoch · 8.8 CVE-2026-41303 < 2026.3.28 2026.3.28
  89. OpenClaw's device removal and token revocation do not terminate active WebSocket sessions
    Hoch · 7.5 CVE-2026-34503 < 2026.3.28 2026.3.28
  90. OpenClaw: CLI Remote Onboarding Persists Unauthenticated Discovery Endpoint and Exfiltrates Gateway Credentials
    Hoch · 7.3 CVE-2026-41342 < 2026.3.28 2026.3.28
  91. OpenClaw: /pair approve command path omitted caller scope subsetting and reopened device pairing escalation
    Kritisch CVE-2026-33579 < 2026.3.28 2026.3.28
  92. OpenClaw: Voice-call Plivo V3 webhook replay key uses unsorted URL, allowing replay via query-parameter reordering
    Hoch CVE-2026-41395 < 2026.3.28 2026.3.28
  93. OpenClaw: `browser.request` still allows `POST /reset-profile` through the `operator.write` surface
    Hoch · 8.1 CVE-2026-35653 < 2026.3.24 2026.3.24
  94. OpenClaw: Gateway operator.write Can Reach Admin-Class Channel Allowlist Persistence via chat.send
    Hoch CVE-2026-35621 < 2026.3.24 2026.3.24
  95. OpenClaw has an Arbitrary Malicious Code Execution Vulnerability
    Hoch · 8.6 CVE-2026-35641 < 2026.3.24 2026.3.24
  96. OpenClaw has Sandbox Media Root Bypass via Unnormalized `mediaUrl` / `fileUrl` Parameter Keys (CWE-22)
    Hoch · 7.7 CVE-2026-35668 < 2026.3.24 2026.3.24
  97. OpenClaw: SSRF via Unguarded Configured Base URLs in Multiple Channel Extensions (Incomplete Fix for CVE-2026-28476)
    Hoch CVE-2026-35629 < 2026.3.28 2026.3.28
  98. OpenClaw: `session_status` sessionId resolution bypasses sandboxed session-tree visibility
    Hoch CVE-2026-35636 >= 2026.3.11, < 2026.3.28 2026.3.28
  99. OpenClaw: Gateway Plugin HTTP Auth Grants Unrestricted operator.admin Runtime Scope to All Callers
    Hoch CVE-2026-35669 <= 2026.3.24 keine Korrektur
  100. OpenClaw: Silent privilege escalation via gateway shared-auth reconnect
    Kritisch CVE-2026-35625 <= 2026.3.24 keine Korrektur
  101. OpenClaw: Gateway Backend Reconnect lets Non-Admin Operator Scopes Self-Claim operator.admin
    Kritisch CVE-2026-35663 <= 2026.3.24 keine Korrektur
  102. OpenClaw: Gateway HTTP /sessions/:sessionKey/kill Reaches Admin Kill Path Without Caller Scope Binding
    Hoch CVE-2026-34512 <= 2026.3.24 keine Korrektur
  103. OpenClaw Gateway: RCE and Privilege Escalation from operator.pairing to operator.admin via device.pair.approve
    Kritisch CVE-2026-35639 < 2026.3.22 2026.3.22
  104. OpenClaw's mutating internal ACP chat commands missed operator.admin scope enforcement
    Hoch CVE-2026-35631 < 2026.3.22 2026.3.22
  105. OpenClaw has Inconsistent Host Exec Environment Override Sanitization
    Hoch · 7.5 CVE-2026-35650 < 2026.3.22 2026.3.22
  106. OpenClaw's Trusted-proxy Control UI sessions retain privileged scopes without device identity on device-less allow paths
    Hoch CVE-2026-35638 < 2026.3.22 2026.3.22
  107. OpenClaw: Remote media error responses could trigger unbounded memory allocation before failure
    Hoch CVE-2026-35633 < 2026.3.22 2026.3.22
  108. OpenClaw: Arbitrary code execution via unvalidated WebView JavascriptInterface
    Hoch · 8.8 CVE-2026-35643 < 2026.3.22 2026.3.22
  109. OpenClaw's system.run allowlist can be bypassed through an unregistered time dispatch wrapper
    Hoch · 8.8 CVE-2026-35666 < 2026.3.22 2026.3.22
  110. OpenClaw: Nostr inbound DMs could trigger unauthenticated crypto work before sender policy enforcement
    Hoch CVE-2026-35627 < 2026.3.22 2026.3.22
  111. OpenClaw: Gateway agent /reset exposes admin session reset to operator.write callers
    Hoch CVE-2026-35660 < 2026.3.23 2026.3.23
  112. OpenClaw: Plivo V2 verified replay identity drifts on query-only variants
    Hoch CVE-2026-35618 < 2026.3.23 2026.3.23
  113. OpenClaw is vulnerable to Path Traversal through path validation bypass
    Hoch · 7.5 CVE-2026-32846 < 2026.03.28 2026.03.28
  114. OpneClaw accepts unsanitized iMessage attachment paths which allowed SCP remote-path command injection
    Hoch CVE-2026-32917 < 2026.3.13 2026.3.13
  115. OpenClaw Telegram webhook request bodies were read before secret validation, enabling unauthenticated resource exhaustion
    Hoch · 7.5 CVE-2026-32980 < 2026.3.13 2026.3.13
  116. OpenClaw bootstrap setup codes could be replayed to escalate pending pairing scopes before approval
    Hoch CVE-2026-32987 < 2026.3.13 2026.3.13
  117. OpenClaw: Feishu webhook mode accepted forged events when only `verificationToken` was configured
    Hoch · 8.6 CVE-2026-32974 < 2026.3.12 2026.3.12
  118. OpenClaw: Gateway `agent` calls could override the workspace boundary
    Hoch · 8.8 CVE-2026-33573 < 2026.3.11 2026.3.11
  119. OpenClaw: WebSocket shared-auth connections could self-declare elevated scopes
    Kritisch · 9.9 CVE-2026-22172 < 2026.3.12 2026.3.12
  120. `OpenClaw: session_status` let sandboxed subagents access parent or sibling session state
    Hoch · 8.4 CVE-2026-32918 < 2026.3.11 2026.3.11
  121. OpenClaw: Workspace plugin auto-discovery allowed code execution from cloned repositories
    Hoch CVE-2026-32920 < 2026.3.12 2026.3.12
  122. OpenClaw: Command-authorized non-owners could reach owner-only `/config` and `/debug` surfaces
    Hoch · 8.8 CVE-2026-32914 < 2026.3.12 2026.3.12
  123. OpenClaw: `browser.request` let `operator.write` persist admin-only browser profile changes
    Hoch · 7.1 CVE-2026-32972 < 2026.3.11 2026.3.11
  124. OpenClaw: Sandbox staged writes could escape the verified parent directory before commit
    Hoch · 7.5 CVE-2026-32988 < 2026.3.11 2026.3.11
  125. OpenClaw: Unrecognized script runners could bypass `system.run` approval integrity
    Hoch · 8.0 CVE-2026-32978 < 2026.3.11 2026.3.11
  126. OpenClaw: Node-host approvals could show misleading shell payloads instead of the executed argv
    Hoch · 7.1 CVE-2026-32971 < 2026.3.11 2026.3.11
  127. OpenClaw: Unbound interpreter and runtime commands could bypass node-host approval integrity
    Hoch · 7.3 CVE-2026-32979 < 2026.3.11 2026.3.11
  128. OpenClaw: Leaf subagents could steer sibling sessions across sandbox boundaries
    Hoch · 8.8 CVE-2026-32915 < 2026.3.11 2026.3.11
  129. OpenClaw: Pairing-scoped device tokens could mint `operator.admin` and reach node RCE
    Kritisch · 9.9 CVE-2026-32922 < 2026.3.11 2026.3.11
  130. OpenClaw: Plugin subagent routes could bypass gateway authorization with synthetic admin scopes
    Kritisch · 9.4 CVE-2026-32916 >= 2026.3.7, < 2026.3.11 2026.3.11
  131. OpenClaw: Untrusted web origins can obtain authenticated operator.admin access in trusted-proxy mode
    Hoch · 8.1 CVE-2026-32302 < 2026.3.11 2026.3.11
  132. OpenClaw: Sandbox dangling-symlink alias handling could bypass workspace-only write boundary
    Hoch · 7.0 ghsa-qcc4-p59m-p54m < 2026.2.26 2026.2.26
  133. OpenClaw: workspace path guard bypass on non-existent out-of-root symlink leaf
    Hoch · 7.6 CVE-2026-32055 < 2026.2.26 2026.2.26
  134. OpenClaw: LINE group allowlist scope mismatch with DM pairing-store entries
    Hoch · 7.1 ghsa-gp3q-wpq4-5c5h < 2026.2.26 2026.2.26
  135. OpenClaw: fetch-guard forwards custom authorization headers across cross-origin redirects
    Hoch · 9.3 CVE-2026-32913 < 2026.3.7 2026.3.7
  136. OpenClaw's dashboard leaked gateway auth material via browser URL/query and localStorage
    Hoch · 7.1 ghsa-rchv-x836-w7xp < 2026.3.7 2026.3.7
  137. OpenClaw: Hardlink alias checks could bypass workspace-only file boundaries in specific configurations
    Hoch ghsa-3jx4-q2m7-r496 < 2026.2.25 2026.2.25
  138. OpenClaw Canvas Authentication Bypass Vulnerability
    Hoch · 7.4 CVE-2026-3690 < 2026.2.19 2026.2.19
  139. OpenClaw: Slack interactive callbacks could skip configured sender checks in some shared-workspace flows
    Hoch · 6.8 CVE-2026-32005 < 2026.2.25 2026.2.25
  140. OpenClaw's commands.allowFrom sender authorization accepted conversation identifiers via ctx.From
    Hoch ghsa-2ch6-x3g4-7759 < 2026.2.23 2026.2.23
Mehr anzeigen (20) 140 von 235 angezeigt

Erkennen Sie Schwachstellen in Ihrer Anwendung

Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.

Anwendung verbinden
DockRay Newsletter

Anwendungssicherheit in Ihrem Postfach

Wichtige Schwachstellen, konkrete Empfehlungen und praktische Tipps für Ihre Anwendungen. Wählen Sie Ihre Technologien und verfolgen Sie, was für Ihr Projekt relevant ist.

  • Eine tägliche Zusammenfassung neuer Schwachstellen, auch kritischer.
  • Benachrichtigungen über wichtige Updates.
  • Praktische Tipps zur Sicherheit und Überwachung von Anwendungen.

Leer lassen, um Meldungen zu allen Technologien zu erhalten.

Datenschutzerklärung

Kostenlos anmelden. In jeder E-Mail mit einem Klick abmelden.