Medium
CVE-2026-41372
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 601
Reset filters
Medium
CVE-2026-41360
OpenClaw: pnpm dlx approvals did not bind local script operands
Medium
CVE-2026-41339
OpenClaw: Gateway hello snapshots exposed host config and state paths to non-admin clients
Medium
CVE-2026-41295
OpenClaw: Untrusted workspace channel shadows could execute during built-in channel setup
Medium
CVE-2026-41298
OpenClaw: Read-scoped identity-bearing HTTP clients could kill sessions via /sessions/:sessionKey/kill
Medium
CVE-2026-41398
OpenClaw: iOS A2UI bridge trusted generic local-network pages for agent.request dispatch
Medium
ghsa-846p-hgpv-vphc
OpenClaw: QQ Bot structured payloads could read arbitrary local files
Medium
CVE-2026-41383
OpenClaw: OpenShell mirror mode could delete arbitrary remote directories when roots were mis-scoped
Low
CVE-2026-41362
OpenClaw: Zalo replay dedupe cache could suppress events across authenticated webhook targets
Medium
CVE-2026-41346
OpenClaw: Pairing pending-request caps were enforced per channel instead of per account
Medium
CVE-2026-41301
OpenClaw: Forged Nostr DMs could create pairing state before signature verification
Medium
CVE-2026-41392
OpenClaw: Shell init-file options could satisfy exec allowlist script matching
Medium
CVE-2026-41355
OpenClaw: OpenShell `mirror` mode can convert untrusted sandbox files into explicitly enabled workspace hooks and execute them on the host during gateway startup
High
CVE-2026-41359
OpenClaw: Gateway operator.write Can Reach Admin-Class Telegram Config and Cron Persistence via send
Medium
CVE-2026-41350
OpenClaw: `session_status` still bypasses configured `tools.sessions.visibility` for unsandboxed invocations
Medium
CVE-2026-41379
OpenClaw: Gateway operator.write Can Reach Admin-Class Talk Voice Config Persistence via chat.send
High
CVE-2026-41384
OpenClaw Has Incomplete Fix for CVE-2026-4039: CLI Backend Environment Variable Injection via Workspace Config
Medium
CVE-2026-41297
OpenClaw: Marketplace Plugin Download Follows Redirects Without SSRF Protection
Medium
CVE-2026-41408
OpenClaw: Tlon media downloads can bypass core safety limits and exhaust disk
Medium
CVE-2026-41375
OpenClaw: `/phone arm`/`/phone disarm` Bypasses `operator.admin` Scope Check for External Channels
Medium
CVE-2026-34425
OpenClaw's complex interpreter pipelines could skip exec script preflight validation
High
CVE-2026-34511
OpenClaw: Gemini OAuth exposed the PKCE verifier through the OAuth state parameter
Low
CVE-2026-41382
OpenClaw: Discord voice ingress authorization can be bypassed via channel, name, and stale-role validation gaps
Low
CVE-2026-41341
OpenClaw: Discord Component Interaction Misclassifies Group DM as Direct Message
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.