High
CVE-2026-35669
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 601
Reset filters
Critical
CVE-2026-35625
OpenClaw: Silent privilege escalation via gateway shared-auth reconnect
Critical
CVE-2026-35663
OpenClaw: Gateway Backend Reconnect lets Non-Admin Operator Scopes Self-Claim operator.admin
High
CVE-2026-34512
OpenClaw: Gateway HTTP /sessions/:sessionKey/kill Reaches Admin Kill Path Without Caller Scope Binding
Medium
CVE-2026-35632
OpenClaw: Symlink Traversal via IDENTITY.md appendFile in agents.create/update (Incomplete Fix for CVE-2026-32013)
Medium
CVE-2026-35658
OpenClaw: Image Tool `tools.fs.workspaceOnly` Bypass via Sandbox Bridge Mounts
Medium
CVE-2026-35655
OpenClaw's Conflicting Tool Identity Hints Bypass Dangerous-Tool Prompting
Medium
CVE-2026-35635
OpenClaw Bypasses DM Policy Separation via Synology Chat Webhook Path Collision
Medium
CVE-2026-35662
OpenClaw leaf subagents can bypass controlScope restrictions to send messages to child sessions
Medium
CVE-2026-35656
OpenClaw: Forwarding header spoofing bypasses gateway.trustedProxies origin detection
Critical
CVE-2026-35639
OpenClaw Gateway: RCE and Privilege Escalation from operator.pairing to operator.admin via device.pair.approve
Medium
CVE-2026-35622
OpenClaw: Google Chat app-url webhook auth accepted non-deployment add-on principals
Low
CVE-2026-35624
OpenClaw: Nextcloud Talk room allowlist matched colliding room names instead of stable room tokens
Low
CVE-2026-35649
OpenClaw: Tlon settings empty-allowlist reconciliation bypassed intended revocation
Medium
CVE-2026-35637
OpenClaw: Tlon cite expansion happens before channel and DM authorization is complete
High
CVE-2026-35631
OpenClaw's mutating internal ACP chat commands missed operator.admin scope enforcement
Medium
CVE-2026-35652
OpenClaw: Mattermost callback dispatch allowed non-allowlisted sender actions
Medium
CVE-2026-35644
OpenClaw Exposes Credentials Embedded in baseUrl Fields via config.get and channels.status
Low
CVE-2026-35648
OpenClaw may have stale policy enforcement for queued node actions
High
CVE-2026-35650
OpenClaw has Inconsistent Host Exec Environment Override Sanitization
High
CVE-2026-35638
OpenClaw's Trusted-proxy Control UI sessions retain privileged scopes without device identity on device-less allow paths
Medium
CVE-2026-35626
OpenClaw is vulnerable to unauthenticated resource exhaustion through its voice call webhook handling
Medium
CVE-2026-35659
OpenClaw: Bonjour/DNS-SD TXT metadata steers CLI routing after failed service resolution
High
CVE-2026-35633
OpenClaw: Remote media error responses could trigger unbounded memory allocation before failure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.