Medium
ghsa-534w-2vm4-89xr
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 601
Reset filters
Medium
ghsa-cjv3-m589-v3rx
OpenClaw has Canvas route hardening for mixed-trust deployments
High
CVE-2026-27566
OpenClaw's exec allowlist wrapper analysis did not unwrap env/shell dispatch chains
Medium
CVE-2026-32039
OpenClaw's typed sender-key matching for toolsBySender prevents identity-collision policy bypass
Medium
CVE-2026-32050
OpenClaw's Signal reaction-only status events could, in limited cases, be enqueued before access checks
High
CVE-2026-27523
OpenClaw's sandbox bind validation could bypass allowed-root and blocked-path checks via symlink-parent missing-leaf paths
High
ghsa-jxrq-8fm4-9p58
OpenClaw: Zip extraction symlink traversal could write outside destination
Medium
CVE-2026-28449
OpenClaw's Nextcloud Talk webhook replay could trigger duplicate inbound processing
Low
ghsa-8mf7-vv8w-hjr2
OpenClaw's tools.exec.safeBins generic fallback allowed interpreter-style inline payload execution in allowlist mode
Medium
CVE-2026-31998
OpenClaw's Synology Chat dmPolicy=allowlist failed open on empty allowedUserIds, allowing unauthorized agent dispatch
Low
CVE-2026-32897
OpenClaw reuses the gateway auth token in the owner ID prompt hashing fallback
High
ghsa-659f-22xc-98f2
OpenClaw hook transform path containment missed symlink-resolved escapes
Medium
CVE-2026-32010
In OpenClaw, manually adding sort to tools.exec.safeBins could bypass allowlist approval via --compress-program
Medium
CVE-2026-32006
OpenClaw has a BlueBubbles group allowlist mismatch via DM pairing-store fallback
Low
ghsa-gcj7-r3hg-m7w6
OpenClaw's voice-call Twilio replay dedupe now bound to authenticated webhook identity
High
ghsa-w7j5-j98m-w679
OpenClaw has multiple E2E/test Dockerfiles that run all processes as root
Medium
ghsa-796m-2973-wc5q
OpenClaw has exec allowlist/safeBins policy-runtime mismatch via env -S wrapper interpretation
Low
ghsa-7qf6-h84j-8fq4
OpenClaw: Microsoft Teams media fetch paths bypass shared SSRF guard model
Medium
CVE-2026-32025
OpenClaw's browser-origin WebSocket auth hardening gap could enable loopback password brute-force chains
Medium
CVE-2026-32029
OpenClaw improperly parses X-Forwarded-For behind trusted proxies allows client IP spoofing in security decisions
High
ghsa-7ff8-xjh3-mgh6
OpenClaw's non-default autoAllowSkills setting could bypass on-miss exec prompt
High
CVE-2026-32056
OpenClaw's shell startup env injection bypasses system.run allowlist intent (RCE class)
Low
CVE-2026-27524
OpenClaw's runtime /debug override path accepted prototype-reserved keys
Medium
CVE-2026-32033
OpenClaw has a workspace-only sandbox guard mismatch for @-prefixed absolute paths
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.