Media
CVE-2026-32024
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 601
Restablecer filtros
Media
CVE-2026-32038
OpenClaw has a sandbox network isolation bypass via docker.network=container:<id>
Alta
CVE-2026-27545
OpenClaw: Node system.run approval bypass via parent-symlink cwd rebind
Alta
CVE-2026-27522
OpenClaw: Message action attachment hydration bypasses local media root checks when sandboxRoot is unset
Media
CVE-2026-32065
OpenClaw: system.run approval identity mismatch could execute a different binary than displayed
Alta
ghsa-943q-mwmv-hhvh
OpenClaw: Gateway /tools/invoke tool escalation + ACP permission auto-approval
Crítica
CVE-2026-28466
OpenClaw Vulnerable to Remote Code Execution via Node Invoke Approval Bypass in Gateway
Media
CVE-2026-28486
OpenClaw vulnerable to path traversal (Zip Slip) in archive extraction during explicit installation commands
Media
CVE-2026-28457
OpenClaw's sandbox skill mirroring path traversal vulnerability could write outside the sandbox workspace
Alta
CVE-2026-28464
OpenClaw has non-constant-time token comparison in hooks authentication
Media
CVE-2026-28475
OpenClaw: Config writes could persist resolved ${VAR} secrets to disk
Alta
CVE-2026-28453
OpenClaw has Zip Slip path traversal in tar archive extraction
Crítica
CVE-2026-32013
OpenClaw gateway agents.files symlink escape allowed out-of-workspace file read/write
Baja
CVE-2026-32058
OpenClaw Node system.run approval context-binding weakness in approval-enabled host=node flows
Alta
CVE-2026-32062
OpenClaw voice-call media stream validated streams after upgrade, which could allow pre-start unauthenticated sockets to increase resource pressure
Alta
CVE-2026-32049
OpenClaw's inbound media downloads could exceed configured byte limits before rejection across multiple channels
Alta
CVE-2026-3689
OpenClaw Canvas Path Traversal Information Disclosure Vulnerability
Media
CVE-2026-22175
OpenClaw's exec allow-always can be bypassed via unrecognized multiplexer shell wrappers (busybox/toybox sh -c)
Media
ghsa-6x2m-hqfw-hvpj
OpenClaw: Node exec approvals could be replayed across nodes
Media
CVE-2026-29607
OpenClaw's allow-always wrapper persistence could bypass future approvals and enable command execution
Baja
CVE-2026-32020
OpenClaw's Control UI Static File Handler Follows Symlinks and Allows Out-of-Root File Read
Media
CVE-2026-32054
OpenClaw has browser trace/download path symlink escape in temp output handling
Media
CVE-2026-22178
OpenClaw has ReDoS and regex injection via unescaped Feishu mention metadata in RegExp construction
Baja
CVE-2026-31993
OpenClaw macOS companion app (beta): allowlist parsing mismatch for system.run shell chains
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.