Zaloguj się
Deutsch English Español Polski
Średnia

OpenClaw has a workspace-only sandbox guard mismatch for @-prefixed absolute paths

  • Ujawniono: 03.03.2026
  • Aktualizacja: 11.10.2026 10:22

A workspace-only file-system guard mismatch allowed @-prefixed absolute paths to bypass boundary validation in some tool path checks.

Impact

When tools.fs.workspaceOnly=true, certain @-prefixed absolute paths (for example @/etc/passwd) could be validated before canonicalization while runtime path handling normalized the prefix differently. In affected code paths this could permit reads outside the intended workspace boundary.

Per SECURITY.md, OpenClaw is primarily a personal-assistant runtime with trusted-user assumptions, and this path is gated behind non-default sandbox/tooling configuration. That reduces practical exposure, but the bypass is still a security bug and is fixed.

Affected Packages / Versions

  • Package: openclaw (npm)
  • Latest published at triage time: 2026.2.23
  • Affected versions: <= 2026.2.23
  • Patched versions: >= 2026.2.24

Fix Commit(s)

  • 9ef0fc2ff8fa7b145d1e746d6eb030b1bf692260

OpenClaw thanks @tdjackey for reporting.

Czego dotyczy

Kliknij technologię, aby zobaczyć wszystkie dotyczące jej podatności.

PlatformaPaczkaPodatne wersjePoprawka w wersji
Paczka npm openclaw < 2026.2.24 2026.2.24

Odnośniki

Ocena CVSS 7.5/10
Wektor CVSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Słabość (CWE)
CWE-180, CWE-22
Platforma
npm
Paczka
openclaw
Ujawniono
03.03.2026
Aktualizacja
11.10.2026 10:22

Źródła i licencje

OSV / GitHub Advisory Database - GHSA-27cr-4p5m-74rj - CC BY 4.0

Historia podatności: openclaw

Wszystkie opisane podatności tej paczki (Paczka npm), od najnowszej. Widać, czy to jednorazowa wpadka, czy paczka, której trzeba pilnować.

Wszystkie (588) w archiwum
Wszystkich wpisów
588
Pierwsza → ostatnia
02.2026 07.2026
Bez poprawki
9
Wykorzystywana w atakach
0

Rozkład istotności

  • Krytyczna 20
  • Wysoka 215
  • Średnia 299
  • Niska 54

Ujawnienia w latach

Istotność:
  1. OpenClaw has a workspace-only sandbox guard mismatch for @-prefixed absolute paths ten wpis
    Średnia · 7.5 CVE-2026-32033 < 2026.2.24 2026.2.24
  2. OpenClaw: Native command authorization could skip owner-command enforcement
    Wysoka CVE-2026-53828 < 2026.5.6 2026.5.6
  3. OpenClaw: PowerShell encoded-command aliases could miss exec allowlist checks
    Wysoka · 8.8 CVE-2026-53836 < 2026.5.12 2026.5.12
  4. OpenClaw: Trusted retry endpoint checks could match hostname prefixes
    Wysoka CVE-2026-53839 < 2026.5.7 2026.5.7
  5. OpenClaw: Telegram interactive callbacks could skip commands.allowFrom
    Wysoka CVE-2026-53807 < 2026.5.6 2026.5.6
  6. OpenClaw: Matrix allowFrom could bind to mutable display names
    Wysoka · 8.8 CVE-2026-53811 < 2026.5.7 2026.5.7
  7. OpenClaw: Paired nodes could forge exec lifecycle events without system.run provenance
    Wysoka · 7.2 CVE-2026-53816 < 2026.5.18 2026.5.18
  8. OpenClaw: Combined POSIX shell options could confuse exec revalidation
    Wysoka · 8.8 CVE-2026-53806 < 2026.5.12 2026.5.12
  9. OpenClaw: Fake package roots could influence memory-core artifact loading
    Wysoka · 7.8 CVE-2026-53813 < 2026.4.25 2026.4.25
  10. OpenClaw: Workspace .env could override Homebrew executable selection for skill install flows
    Wysoka · 8.8 CVE-2026-53819 < 2026.5.27 2026.5.27
  11. OpenClaw: QQBot pre-dispatch slash commands could skip allowFrom checks
    Wysoka · 7.5 CVE-2026-53834 < 2026.4.27 2026.4.27
  12. OpenClaw: Non-owner chat senders could issue device-pairing bootstrap codes
    Wysoka · 8.3 CVE-2026-32905 < 2026.5.4 2026.5.4
  13. OpenClaw: QQBot admin commands could skip DM-only and allowFrom policy
    Krytyczna CVE-2026-34507 < 2026.4.29 2026.4.29
  14. OpenClaw: Trusted-proxy Control UI WebSocket accepted client-declared scopes before pairing
    Wysoka · 8.8 CVE-2026-53821 < 2026.5.18 2026.5.18
  15. OpenClaw: Slack allowFrom could bind to mutable display names
    Wysoka CVE-2026-53823 < 2026.5.3 2026.5.3
  16. OpenClaw: QQBot streaming command could mutate config without explicit allowFrom
    Wysoka · 7.7 CVE-2026-53833 < 2026.4.29 2026.4.29
  17. OpenClaw: Scoped chat.send route inheritance could bypass admin command scope gates
    Wysoka · 8.8 CVE-2026-35674 < 2026.5.18 2026.5.18
  18. OpenClaw's POSIX node system.run safe-bin allowlist could be widened by shell expansion
    Wysoka · 7.1 CVE-2026-53831 < 2026.5.18 2026.5.18
  19. OpenClaw: QQBot native approval buttons did not enforce configured approver identity
    Wysoka · 8.0 CVE-2026-35630 < 2026.5.18 2026.5.18
  20. OpenClaw: Hook-triggered CLI runs could receive owner MCP tool authority
    Wysoka · 8.4 CVE-2026-53814 < 2026.5.20 2026.5.20
  21. OpenClaw: Control UI locality spoofing could mint a durable admin device token
    Wysoka · 8.0 CVE-2026-53817 < 2026.5.22 2026.5.22
  22. OpenClaw: Same-host trusted-proxy deployments could accept local forged identity headers
    Wysoka · 7.7 CVE-2026-53832 < 2026.5.18 2026.5.18
  23. OpenClaw's marketplace runtime extension metadata could point at unscanned payloads
    Wysoka · 8.8 CVE-2026-53810 < 2026.5.18 2026.5.18
  24. OpenClaw: Shell wrapper argv could change between approval and execution
    Wysoka CVE-2026-53822 < 2026.5.18 2026.5.18
  25. OpenClaw: Exec approval display truncation could hide the command being approved
    Wysoka · 8.0 CVE-2026-53829 < 2026.5.18 2026.5.18
  26. OpenClaw: Message read actions could skip channel allowlist checks
    Wysoka · 6.5 CVE-2026-53815 < 2026.5.19 2026.5.19
  27. OpenClaw: Workspace-derived service PATH could influence trash command selection
    Wysoka · 7.1 CVE-2026-53865 < 2026.5.2 2026.5.2
  28. OpenClaw: Workspace .env STATE_DIRECTORY could influence bundled runtime dependency roots
    Wysoka · 7.1 CVE-2026-53858 < 2026.5.2 2026.5.2
  29. OpenClaw: Discord allowFrom could bind to mutable display names
    Wysoka · 8.1 CVE-2026-53849 < 2026.5.7 2026.5.7
  30. OpenClaw: Workspace .env npm_execpath could influence bundled runtime dependency install
    Wysoka · 7.1 CVE-2026-53846 < 2026.4.29 2026.4.29
  31. OpenClaw: Linux and macOS exec allowlists skipped configured argument patterns
    Wysoka · 7.1 CVE-2026-53853 < 2026.5.12 2026.5.12
  32. OpenClaw: Zalo allowFrom could bind to mutable display names
    Wysoka · 8.1 CVE-2026-53857 < 2026.5.3 2026.5.3
  33. OpenClaw: Shell positional parameters could weaken strict inline-eval checks
    Wysoka · 8.1 CVE-2026-53855 < 2026.4.2 2026.4.2
  34. OpenClaw: Workspace .env CLOUDSDK_PYTHON could influence Gmail setup gcloud execution
    Wysoka · 7.1 CVE-2026-53842 < 2026.5.2 2026.5.2
  35. OpenClaw: Shell inline-command parsing could miss an allowlist check
    Wysoka · 8.1 CVE-2026-53866 < 2026.5.12 2026.5.12
  36. OpenClaw: Pairing-scoped device session could restore revoked node token authority
    Wysoka · 8.8 CVE-2026-53843 < 2026.5.26 2026.5.26
  37. OpenClaw: Host environment sanitizer missed two Node.js control variables
    Wysoka · 8.1 CVE-2026-53864 < 2026.5.26 2026.5.26
  38. OpenClaw: MCP Streamable HTTP redirects could forward configured custom headers to another origin
    Wysoka · 7.1 CVE-2026-53840 < 2026.5.12 2026.5.12
  39. OpenClaw's gateway config mutation guard allowed unsafe model-driven config writes
    Wysoka · 8.8 CVE-2026-45006 < 2026.4.23 2026.4.23
  40. OpenClaw vulnerable to arbitrary code execution via attacker-controlled setup-api.js loaded from cwd during env-key resolution
    Wysoka · 7.8 CVE-2026-45004 < 2026.4.23 2026.4.23
  41. OpenClaw: MCP loopback owner context is derived from server-issued bearer tokens
    Wysoka · 7.8 CVE-2026-44118 < 2026.4.22 2026.4.22
  42. OpenClaw: Workspace dotenv could override runtime-control environment variables
    Wysoka · 7.8 CVE-2026-44114 < 2026.4.20 2026.4.20
  43. OpenClaw: Feishu webhook and card-action validation now fail closed
    Krytyczna · 9.8 CVE-2026-44109 < 2026.4.15 2026.4.15
  44. OpenClaw: Gateway HTTP endpoints re-resolve bearer auth after SecretRef rotation
    Krytyczna · 8.1 CVE-2026-43585 < 2026.4.15 2026.4.15
  45. OpenClaw: QQBot media tags could read arbitrary local files through reply text
    Wysoka CVE-2026-43533 < 2026.4.10 2026.4.10
  46. OpenClaw: busybox and toybox applet execution weakened exec approval binding
    Wysoka · 8.8 CVE-2026-43530 >= 2026.2.23, < 2026.4.12 2026.4.12
  47. OpenClaw: Matrix profile config persistence was reachable from operator.write message tools
    Wysoka · 6.5 CVE-2026-42433 < 2026.4.10 2026.4.10
  48. OpenClaw: Sandboxed agents could escape exec routing via host=node override
    Wysoka · 8.8 CVE-2026-42434 >= 2026.4.5, < 2026.4.10 2026.4.10
  49. OpenClaw: Workspace provider auth choices could auto-enable untrusted provider plugins
    Wysoka · 8.8 CVE-2026-43569 < 2026.4.9 2026.4.9
  50. OpenClaw: Sandbox browser CDP relay could expose DevTools protocol on 0.0.0.0
    Wysoka CVE-2026-43581 < 2026.4.10 2026.4.10
  51. OpenClaw: Channel setup catalog lookups could include untrusted workspace plugin shadows
    Wysoka · 8.8 CVE-2026-43571 < 2026.4.10 2026.4.10
  52. OpenClaw: Exec environment denylist missed high-risk interpreter startup variables
    Wysoka · 8.8 CVE-2026-43584 < 2026.4.10 2026.4.10
  53. OpenClaw: Voice-call realtime WebSocket accepted oversized frames
    Wysoka · 7.5 CVE-2026-42437 >= 2026.4.9, < 2026.4.10 2026.4.10
  54. OpenClaw: config.get redaction bypass through sourceConfig and runtimeConfig aliases
    Wysoka CVE-2026-43528 < 2026.4.14 2026.4.14
  55. OpenClaw: `fetchWithSsrFGuard` replays unsafe request bodies across cross-origin redirects
    Wysoka CVE-2026-40037 < 2026.4.8 2026.4.8
  56. OpenClaw: Node Pairing Reconnect Command Escalation Bypasses operator.admin Scope Requirement
    Wysoka · 7.8 CVE-2026-42432 < 2026.4.8 2026.4.8
  57. OpenClaw: HGRCPATH, CARGO_BUILD_RUSTC_WRAPPER, RUSTC_WRAPPER, and MAKEFLAGS missing from exec env denylist — RCE via build tool env injection (GHSA-cm8v-2vh9-cxf3 class)
    Wysoka CVE-2026-42427 < 2026.4.8 2026.4.8
  58. OpenClaw: Authenticated `/hooks/wake` and mapped `wake` payloads are promoted into the trusted `System:` prompt channel
    Wysoka ghsa-jf56-mccx-5f3f < 2026.4.8 2026.4.8
  59. OpenClaw: Lower-trust background runtime output is injected into trusted `System:` events, and local async exec completion misses the intended `exec-event` downgrade
    Wysoka ghsa-gfmx-pph7-g46x < 2026.4.8 2026.4.8
  60. OpenClaw: Gateway operator.write Can Reach Admin-Class Telegram Config and Cron Persistence via send
    Wysoka · 7.1 CVE-2026-41359 < 2026.3.28 2026.3.28
  61. OpenClaw Has Incomplete Fix for CVE-2026-4039: CLI Backend Environment Variable Injection via Workspace Config
    Wysoka · 7.8 CVE-2026-41384 < 2026.3.24 2026.3.24
  62. OpenClaw: Gemini OAuth exposed the PKCE verifier through the OAuth state parameter
    Wysoka CVE-2026-34511 < 2026.4.2 2026.4.2
  63. OpenClaw: macOS Tailnet DNS Spoofing & Credential Exfiltration
    Wysoka CVE-2026-41393 < 2026.3.31 2026.3.31
  64. OpenClaw: Unbound bootstrap setup codes allow privilege escalation during pairing
    Wysoka · 9.8 CVE-2026-41386 < 2026.3.22 2026.3.22
  65. OpenClaw: Node browser proxy `allowProfiles` bypass through persistent profile mutation and runtime profile selection
    Wysoka CVE-2026-41353 < 2026.3.22 2026.3.22
  66. OpenClaw: Paired node escalates to gateway RCE via unrestricted node.event agent dispatch
    Wysoka · 8.8 CVE-2026-41378 < 2026.3.31 2026.3.31
  67. OpenClaw: Sandbox escape via TOCTOU race in remote FS bridge readFile
    Krytyczna · 8.2 CVE-2026-41296 < 2026.3.31 2026.3.31
  68. OpenClaw: Host exec environment sanitization misses package, registry, Docker, compiler, and TLS override variables
    Wysoka · 6.5 CVE-2026-41369 < 2026.3.31 2026.3.31
  69. OpenClaw: Incomplete scope-clearing fix allows operator.admin escalation via trusted-proxy auth mode
    Wysoka CVE-2026-41404 < 2026.3.31 2026.3.31
  70. OpenClaw: Agentic Consent Bypass — LLM Agent Can Silently Disable Exec Approval via `config.patch`
    Wysoka CVE-2026-41349 < 2026.3.28 2026.3.28
  71. OpenClaw: Incomplete host-env-security-policy allows untrusted model to substitute compiler binaries via env overrides
    Wysoka · 6.1 CVE-2026-41373 < 2026.3.31 2026.3.31
  72. OpenClaw: Device-Paired Node Skips Node Scope Gate → Host RCE.md
    Wysoka · 8.8 CVE-2026-41352 < 2026.3.31 2026.3.31
  73. OpenClaw: MS Teams webhook parses body before JWT validation, enabling unauthenticated resource exhaustion
    Wysoka · 7.5 CVE-2026-41405 < 2026.3.31 2026.3.31
  74. OpenClaw: Self-Whitelisting in appendLocalMediaParentRoots Allows Arbitrary File Read & Credential Exfiltration
    Wysoka CVE-2026-41366 < 2026.3.31 2026.3.31
  75. OpenClaw: OpenShell Mirror Sync — Sandbox Escape via Unrestricted File Sync + Symlink Traversal
    Wysoka · 9.6 CVE-2026-41397 < 2026.3.31 2026.3.31
  76. OpenClaw: Workspace `.env` can override the bundled plugin trust root
    Wysoka · 7.8 CVE-2026-41396 < 2026.3.31 2026.3.31
  77. OpenClaw: SSH sandbox tar upload follows symlinks, enabling arbitrary file write on remote host
    Wysoka · 8.1 CVE-2026-41364 < 2026.3.31 2026.3.31
  78. OpenClaw: Workspace `.env` can override the bundled hooks root and load attacker hook code
    Wysoka · 7.8 CVE-2026-41336 < 2026.3.31 2026.3.31
  79. OpenClaw: Heartbeat context inheritance bypasses sandbox via senderIsOwner escalation
    Krytyczna CVE-2026-41329 < 2026.3.31 2026.3.31
  80. OpenClaw: PIP_INDEX_URL and UV_INDEX_URL bypass host exec env sanitization and redirect Python package-index traffic
    Wysoka · 5.3 CVE-2026-41391 < 2026.3.31 2026.3.31
  81. OpenClaw has a CWD `.env` environment variable injection which bypasses host-env policy and allows config takeover
    Krytyczna · 9.6 CVE-2026-41294 < 2026.3.28 2026.3.28
  82. OpenClaw gateway exec allow-always over-trusts positional carrier executables
    Wysoka · 7.3 CVE-2026-41380 < 2026.3.28 2026.3.28
  83. OpenClaw Gateway `operator.write` can reach admin-only session reset via `chat.send` `/reset`
    Wysoka CVE-2026-41371 < 2026.3.28 2026.3.28
  84. OpenClaw has a gateway exec allowlist allow-always bypass via unregistered /usr/bin/script wrapper
    Wysoka · 7.3 CVE-2026-41390 < 2026.3.28 2026.3.28
  85. OpenClaw's incomplete host env sanitization blocklist allows supply-chain redirection via package-manager env overrides
    Wysoka · 9.6 CVE-2026-41387 < 2026.3.22 2026.3.22
  86. OpenClaw: Gateway chat.send ACP-only provenance guard could be bypassed by client identity spoofing
    Wysoka CVE-2026-41299 < 2026.3.28 2026.3.28
  87. OpenClaw safeBins jq `$ENV` filter bypass allows environment variable disclosure
    Wysoka · 7.7 CVE-2026-41368 < 2026.3.28 2026.3.28
  88. OpenClaw's message tool media parameter bypasses tool policy filesystem isolation
    Wysoka · 6.2 CVE-2026-33581 < 2026.3.24 2026.3.24
  89. OpenClaw: Discord text `/approve` bypasses `channels.discord.execApprovals.approvers` and allows non-approvers to resolve pending exec approvals
    Wysoka · 8.8 CVE-2026-41303 < 2026.3.28 2026.3.28
  90. OpenClaw's device removal and token revocation do not terminate active WebSocket sessions
    Wysoka · 7.5 CVE-2026-34503 < 2026.3.28 2026.3.28
  91. OpenClaw: CLI Remote Onboarding Persists Unauthenticated Discovery Endpoint and Exfiltrates Gateway Credentials
    Wysoka · 7.3 CVE-2026-41342 < 2026.3.28 2026.3.28
  92. OpenClaw: /pair approve command path omitted caller scope subsetting and reopened device pairing escalation
    Krytyczna CVE-2026-33579 < 2026.3.28 2026.3.28
  93. OpenClaw: Voice-call Plivo V3 webhook replay key uses unsorted URL, allowing replay via query-parameter reordering
    Wysoka CVE-2026-41395 < 2026.3.28 2026.3.28
  94. OpenClaw: `browser.request` still allows `POST /reset-profile` through the `operator.write` surface
    Wysoka · 8.1 CVE-2026-35653 < 2026.3.24 2026.3.24
  95. OpenClaw: Gateway operator.write Can Reach Admin-Class Channel Allowlist Persistence via chat.send
    Wysoka CVE-2026-35621 < 2026.3.24 2026.3.24
  96. OpenClaw has an Arbitrary Malicious Code Execution Vulnerability
    Wysoka · 8.6 CVE-2026-35641 < 2026.3.24 2026.3.24
  97. OpenClaw has Sandbox Media Root Bypass via Unnormalized `mediaUrl` / `fileUrl` Parameter Keys (CWE-22)
    Wysoka · 7.7 CVE-2026-35668 < 2026.3.24 2026.3.24
  98. OpenClaw: SSRF via Unguarded Configured Base URLs in Multiple Channel Extensions (Incomplete Fix for CVE-2026-28476)
    Wysoka CVE-2026-35629 < 2026.3.28 2026.3.28
  99. OpenClaw: `session_status` sessionId resolution bypasses sandboxed session-tree visibility
    Wysoka CVE-2026-35636 >= 2026.3.11, < 2026.3.28 2026.3.28
  100. OpenClaw: Gateway Plugin HTTP Auth Grants Unrestricted operator.admin Runtime Scope to All Callers
    Wysoka CVE-2026-35669 <= 2026.3.24 brak poprawki
  101. OpenClaw: Silent privilege escalation via gateway shared-auth reconnect
    Krytyczna CVE-2026-35625 <= 2026.3.24 brak poprawki
  102. OpenClaw: Gateway Backend Reconnect lets Non-Admin Operator Scopes Self-Claim operator.admin
    Krytyczna CVE-2026-35663 <= 2026.3.24 brak poprawki
  103. OpenClaw: Gateway HTTP /sessions/:sessionKey/kill Reaches Admin Kill Path Without Caller Scope Binding
    Wysoka CVE-2026-34512 <= 2026.3.24 brak poprawki
  104. OpenClaw Gateway: RCE and Privilege Escalation from operator.pairing to operator.admin via device.pair.approve
    Krytyczna CVE-2026-35639 < 2026.3.22 2026.3.22
  105. OpenClaw's mutating internal ACP chat commands missed operator.admin scope enforcement
    Wysoka CVE-2026-35631 < 2026.3.22 2026.3.22
  106. OpenClaw has Inconsistent Host Exec Environment Override Sanitization
    Wysoka · 7.5 CVE-2026-35650 < 2026.3.22 2026.3.22
  107. OpenClaw's Trusted-proxy Control UI sessions retain privileged scopes without device identity on device-less allow paths
    Wysoka CVE-2026-35638 < 2026.3.22 2026.3.22
  108. OpenClaw: Remote media error responses could trigger unbounded memory allocation before failure
    Wysoka CVE-2026-35633 < 2026.3.22 2026.3.22
  109. OpenClaw: Arbitrary code execution via unvalidated WebView JavascriptInterface
    Wysoka · 8.8 CVE-2026-35643 < 2026.3.22 2026.3.22
  110. OpenClaw's system.run allowlist can be bypassed through an unregistered time dispatch wrapper
    Wysoka · 8.8 CVE-2026-35666 < 2026.3.22 2026.3.22
  111. OpenClaw: Nostr inbound DMs could trigger unauthenticated crypto work before sender policy enforcement
    Wysoka CVE-2026-35627 < 2026.3.22 2026.3.22
  112. OpenClaw: Gateway agent /reset exposes admin session reset to operator.write callers
    Wysoka CVE-2026-35660 < 2026.3.23 2026.3.23
  113. OpenClaw: Plivo V2 verified replay identity drifts on query-only variants
    Wysoka CVE-2026-35618 < 2026.3.23 2026.3.23
  114. OpenClaw is vulnerable to Path Traversal through path validation bypass
    Wysoka · 7.5 CVE-2026-32846 < 2026.03.28 2026.03.28
  115. OpneClaw accepts unsanitized iMessage attachment paths which allowed SCP remote-path command injection
    Wysoka CVE-2026-32917 < 2026.3.13 2026.3.13
  116. OpenClaw Telegram webhook request bodies were read before secret validation, enabling unauthenticated resource exhaustion
    Wysoka · 7.5 CVE-2026-32980 < 2026.3.13 2026.3.13
  117. OpenClaw bootstrap setup codes could be replayed to escalate pending pairing scopes before approval
    Wysoka CVE-2026-32987 < 2026.3.13 2026.3.13
  118. OpenClaw: Feishu webhook mode accepted forged events when only `verificationToken` was configured
    Wysoka · 8.6 CVE-2026-32974 < 2026.3.12 2026.3.12
  119. OpenClaw: Gateway `agent` calls could override the workspace boundary
    Wysoka · 8.8 CVE-2026-33573 < 2026.3.11 2026.3.11
  120. OpenClaw: WebSocket shared-auth connections could self-declare elevated scopes
    Krytyczna · 9.9 CVE-2026-22172 < 2026.3.12 2026.3.12
  121. `OpenClaw: session_status` let sandboxed subagents access parent or sibling session state
    Wysoka · 8.4 CVE-2026-32918 < 2026.3.11 2026.3.11
  122. OpenClaw: Workspace plugin auto-discovery allowed code execution from cloned repositories
    Wysoka CVE-2026-32920 < 2026.3.12 2026.3.12
  123. OpenClaw: Command-authorized non-owners could reach owner-only `/config` and `/debug` surfaces
    Wysoka · 8.8 CVE-2026-32914 < 2026.3.12 2026.3.12
  124. OpenClaw: `browser.request` let `operator.write` persist admin-only browser profile changes
    Wysoka · 7.1 CVE-2026-32972 < 2026.3.11 2026.3.11
  125. OpenClaw: Sandbox staged writes could escape the verified parent directory before commit
    Wysoka · 7.5 CVE-2026-32988 < 2026.3.11 2026.3.11
  126. OpenClaw: Unrecognized script runners could bypass `system.run` approval integrity
    Wysoka · 8.0 CVE-2026-32978 < 2026.3.11 2026.3.11
  127. OpenClaw: Node-host approvals could show misleading shell payloads instead of the executed argv
    Wysoka · 7.1 CVE-2026-32971 < 2026.3.11 2026.3.11
  128. OpenClaw: Unbound interpreter and runtime commands could bypass node-host approval integrity
    Wysoka · 7.3 CVE-2026-32979 < 2026.3.11 2026.3.11
  129. OpenClaw: Leaf subagents could steer sibling sessions across sandbox boundaries
    Wysoka · 8.8 CVE-2026-32915 < 2026.3.11 2026.3.11
  130. OpenClaw: Pairing-scoped device tokens could mint `operator.admin` and reach node RCE
    Krytyczna · 9.9 CVE-2026-32922 < 2026.3.11 2026.3.11
  131. OpenClaw: Plugin subagent routes could bypass gateway authorization with synthetic admin scopes
    Krytyczna · 9.4 CVE-2026-32916 >= 2026.3.7, < 2026.3.11 2026.3.11
  132. OpenClaw: Untrusted web origins can obtain authenticated operator.admin access in trusted-proxy mode
    Wysoka · 8.1 CVE-2026-32302 < 2026.3.11 2026.3.11
  133. OpenClaw: Sandbox dangling-symlink alias handling could bypass workspace-only write boundary
    Wysoka · 7.0 ghsa-qcc4-p59m-p54m < 2026.2.26 2026.2.26
  134. OpenClaw: workspace path guard bypass on non-existent out-of-root symlink leaf
    Wysoka · 7.6 CVE-2026-32055 < 2026.2.26 2026.2.26
  135. OpenClaw: LINE group allowlist scope mismatch with DM pairing-store entries
    Wysoka · 7.1 ghsa-gp3q-wpq4-5c5h < 2026.2.26 2026.2.26
  136. OpenClaw: fetch-guard forwards custom authorization headers across cross-origin redirects
    Wysoka · 9.3 CVE-2026-32913 < 2026.3.7 2026.3.7
  137. OpenClaw's dashboard leaked gateway auth material via browser URL/query and localStorage
    Wysoka · 7.1 ghsa-rchv-x836-w7xp < 2026.3.7 2026.3.7
  138. OpenClaw: Hardlink alias checks could bypass workspace-only file boundaries in specific configurations
    Wysoka ghsa-3jx4-q2m7-r496 < 2026.2.25 2026.2.25
  139. OpenClaw Canvas Authentication Bypass Vulnerability
    Wysoka · 7.4 CVE-2026-3690 < 2026.2.19 2026.2.19
  140. OpenClaw: Slack interactive callbacks could skip configured sender checks in some shared-workspace flows
    Wysoka · 6.8 CVE-2026-32005 < 2026.2.25 2026.2.25
  141. OpenClaw's commands.allowFrom sender authorization accepted conversation identifiers via ctx.From
    Wysoka ghsa-2ch6-x3g4-7759 < 2026.2.23 2026.2.23
Pokaż więcej (20) Widać 141 z 236

Dowiedz się, które podatności dotyczą Twojej aplikacji

Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.

Podłącz swoją aplikację
Newsletter DockRay

Bezpieczeństwo aplikacji w Twojej skrzynce

Najważniejsze podatności, konkretne zalecenia i praktyczne wskazówki dla Twoich aplikacji. Wybierz technologie i śledź to, co ma znaczenie dla Twojego projektu.

  • Codzienne zestawienie nowych podatności, także krytycznych.
  • Powiadomienia o ważnych aktualizacjach.
  • Praktyczne porady o bezpieczeństwie i monitoringu aplikacji.

Pozostaw puste, aby otrzymywać informacje o wszystkich technologiach.

Polityka prywatności

Zapis jest bezpłatny. Wypiszesz się jednym kliknięciem w wiadomości.