Security advisories

high2026-07-02

OpenClaw: Trusted-proxy Control UI WebSocket accepted client-declared scopes before pairing

openclaw/openclaw · GHSA-qjpc-qf9m-xwmr

high2026-07-02

OpenClaw: Slack allowFrom could bind to mutable display names

openclaw/openclaw · GHSA-c29c-2q9c-pc86

medium2026-07-02

OpenClaw: Skill Workshop apply flow could override pending approval

openclaw/openclaw · GHSA-cqwv-9qjx-vxw2

high2026-07-02

CVE-2026-53833-OpenClaw: QQBot streaming command could mutate config without explicit allowFrom

openclaw/openclaw · GHSA-jvm4-4j77-39p6

medium2026-07-02

CVE-2026-53838-OpenClaw: Node pairing reconnection could confuse approval scope state

openclaw/openclaw · GHSA-83w9-h5wv-j9xm

medium2026-07-02

OpenClaw's Slack plugin approvals used the exec approver gate for plugin actions

openclaw/openclaw · GHSA-wv26-j37q-2g7p

medium2026-07-02

OpenClaw: memory-wiki ingest could read local files with operator.write scope

openclaw/openclaw · GHSA-p2fh-f5fc-44hr

high2026-07-02

OpenClaw: Scoped chat.send route inheritance could bypass admin command scope gates

openclaw/openclaw · GHSA-hw9r-h9mr-4jff

high2026-07-02

CVE-2026-53831-OpenClaw's POSIX node system.run safe-bin allowlist could be widened by shell expansion

openclaw/openclaw · GHSA-mhq8-78pj-5j79

high2026-07-02

CVE-2026-35630-OpenClaw: QQBot native approval buttons did not enforce configured approver identity

openclaw/openclaw · GHSA-mgq6-vr84-7m2j

high2026-07-02

CVE-2026-53814-OpenClaw: Hook-triggered CLI runs could receive owner MCP tool authority

openclaw/openclaw · GHSA-6fvr-66p3-3qj4

high2026-07-02

CVE-2026-53817-OpenClaw: Control UI locality spoofing could mint a durable admin device token

openclaw/openclaw · GHSA-chr9-m4q2-76hw

high2026-07-02

CVE-2026-53832-OpenClaw: Same-host trusted-proxy deployments could accept local forged identity headers

openclaw/openclaw · GHSA-rggc-m335-3wvj

high2026-07-02

CVE-2026-53810-OpenClaw's marketplace runtime extension metadata could point at unscanned payloads

openclaw/openclaw · GHSA-v6r2-jh58-xx6w

medium2026-07-02

CVE-2026-53812-OpenClaw's browser act interactions could bypass private-network navigation checks

openclaw/openclaw · GHSA-2hfg-4fh4-qp7f

high2026-07-02

OpenClaw: Shell wrapper argv could change between approval and execution

openclaw/openclaw · GHSA-2j8v-hwgc-x698

medium2026-07-02

OpenClaw: Bundle MCP loopback could miss its exec denylist on session spawn

openclaw/openclaw · GHSA-qh2f-99mv-mrcf

high2026-07-02

OpenClaw: Exec approval display truncation could hide the command being approved

openclaw/openclaw · GHSA-xww8-gqvh-92x9

high2026-07-02

CVE-2026-53815-OpenClaw: Message read actions could skip channel allowlist checks

openclaw/openclaw · GHSA-q7q8-3mgw-q67r

critical2026-07-02

CVE-2026-50027-mcp-memory-service: Missing Authentication on Document API Endpoints Allows Unauthenticated Memory Read/Write/Delete

doobidoo/mcp-memory-service · GHSA-84hp-mqvj-3p8h