Security advisories

medium2026-04-17

CVE-2026-43576-OpenClaw: CDP /json/version WebSocket URL could pivot to untrusted second-hop targets

openclaw/openclaw · GHSA-f7fh-qg34-x2xh

medium2026-04-17

CVE-2026-42438-OpenClaw: Sender policy bypass in host media attachment reads allows unauthorized local file disclosure

openclaw/openclaw · GHSA-jhpv-5j76-m56h

high2026-04-17

CVE-2026-43533-OpenClaw: QQBot media tags could read arbitrary local files through reply text

openclaw/openclaw · GHSA-66r7-m7xm-v49h

high2026-04-17

CVE-2026-43530-OpenClaw: busybox and toybox applet execution weakened exec approval binding

openclaw/openclaw · GHSA-2cq5-mf3v-mx44

high2026-04-17

CVE-2026-42433-OpenClaw: Matrix profile config persistence was reachable from operator.write message tools

openclaw/openclaw · GHSA-7jp6-r74r-995q

high2026-04-17

CVE-2026-42434-OpenClaw: Sandboxed agents could escape exec routing via host=node override

openclaw/openclaw · GHSA-736r-jwj6-4w23

medium2026-04-17

CVE-2026-43580-OpenClaw: Browser press/type interaction routes missed complete navigation guard coverage

openclaw/openclaw · GHSA-536q-mj95-h29h

medium2026-04-17

OpenClaw: Browser interaction routes could pivot into local CDP and regain file reads

openclaw/openclaw · GHSA-qmwg-qprg-3j38

high2026-04-17

CVE-2026-43569-OpenClaw: Workspace provider auth choices could auto-enable untrusted provider plugins

openclaw/openclaw · GHSA-939r-rj45-g2rj

medium2026-04-17

CVE-2026-43573-OpenClaw: Existing-session browser interaction routes bypassed SSRF policy enforcement

openclaw/openclaw · GHSA-527m-976r-jf79

medium2026-04-17

CVE-2026-42439-OpenClaw: Browser tabs action select and close routes bypassed SSRF policy

openclaw/openclaw · GHSA-rj2p-j66c-mgqh

medium2026-04-17

OpenClaw: Nostr profile mutation routes allowed operator.write config persistence

openclaw/openclaw · GHSA-f3h5-h452-vp3j

high2026-04-17

OpenClaw: Sandbox browser CDP relay could expose DevTools protocol on 0.0.0.0

openclaw/openclaw · GHSA-525j-hqq2-66r4

high2026-04-17

CVE-2026-43571-OpenClaw: Channel setup catalog lookups could include untrusted workspace plugin shadows

openclaw/openclaw · GHSA-82qx-6vj7-p8m2

medium2026-04-17

CVE-2026-43567-OpenClaw: screen_record outPath bypassed workspace-only filesystem guard

openclaw/openclaw · GHSA-jf25-7968-h2h5

medium2026-04-17

CVE-2026-43527-OpenClaw: Browser SSRF policy default allowed private-network navigation

openclaw/openclaw · GHSA-53vx-pmqw-863c

medium2026-04-17

CVE-2026-43582-OpenClaw: Browser SSRF hostname validation could be bypassed by DNS rebinding

openclaw/openclaw · GHSA-xq94-r468-qwgj

medium2026-04-17

CVE-2026-43526-OpenClaw: QQBot reply media URL handling could trigger SSRF and re-upload fetched bytes

openclaw/openclaw · GHSA-2767-2q9v-9326

medium2026-04-17

CVE-2026-43531-OpenClaw: Workspace .env could inject OpenClaw runtime-control variables

openclaw/openclaw · GHSA-7wv4-cc7p-jhxc

medium2026-04-17

CVE-2026-43532-OpenClaw: Discord event cover images bypassed sandbox media normalization

openclaw/openclaw · GHSA-c9h3-5p7r-mrjh