Security advisories

medium2026-04-07

CVE-2026-41398-OpenClaw: iOS A2UI bridge trusted generic local-network pages for agent.request dispatch

openclaw/openclaw · GHSA-4p4f-fc8q-84m3

medium2026-04-07

OpenClaw: QQ Bot structured payloads could read arbitrary local files

openclaw/openclaw · GHSA-846p-hgpv-vphc

medium2026-04-07

CVE-2026-41383-OpenClaw: OpenShell mirror mode could delete arbitrary remote directories when roots were mis-scoped

openclaw/openclaw · GHSA-m34q-h93w-vg5x

low2026-04-07

OpenClaw: Zalo replay dedupe cache could suppress events across authenticated webhook targets

openclaw/openclaw · GHSA-fqrj-m88p-qf3v

medium2026-04-07

CVE-2026-41346-OpenClaw: Pairing pending-request caps were enforced per channel instead of per account

openclaw/openclaw · GHSA-wwfp-w96m-c6x8

medium2026-04-07

CVE-2026-41301-OpenClaw: Forged Nostr DMs could create pairing state before signature verification

openclaw/openclaw · GHSA-h43v-27wg-5mf9

medium2026-04-07

CVE-2026-41392-OpenClaw: Shell init-file options could satisfy exec allowlist script matching

openclaw/openclaw · GHSA-wpc6-37g7-8q4w

medium2026-04-07

CVE-2026-41355-OpenClaw: OpenShell `mirror` mode can convert untrusted sandbox files into explicitly enabled workspace hooks and execute them on the host during gateway startup

openclaw/openclaw · GHSA-42mx-vp8m-j7qh

high2026-04-07

CVE-2026-41359-OpenClaw: Gateway operator.write Can Reach Admin-Class Telegram Config and Cron Persistence via send

openclaw/openclaw · GHSA-767m-xrhc-fxm7

medium2026-04-07

OpenClaw: `session_status` still bypasses configured `tools.sessions.visibility` for unsandboxed invocations

openclaw/openclaw · GHSA-fwjq-xwfj-gv75

medium2026-04-07

CVE-2026-41379-OpenClaw: Gateway operator.write Can Reach Admin-Class Talk Voice Config Persistence via chat.send

openclaw/openclaw · GHSA-3q42-xmxv-9vfr

high2026-04-07

CVE-2026-41384-OpenClaw Has Incomplete Fix for CVE-2026-4039: CLI Backend Environment Variable Injection via Workspace Config

openclaw/openclaw · GHSA-vfw7-6rhc-6xxg

medium2026-04-07

CVE-2026-41297-OpenClaw: Marketplace Plugin Download Follows Redirects Without SSRF Protection

openclaw/openclaw · GHSA-vjx8-8p7h-82gr

medium2026-04-07

CVE-2026-41408-OpenClaw: Tlon media downloads can bypass core safety limits and exhaust disk

openclaw/openclaw · GHSA-4g5x-2jfc-xm98

medium2026-04-07

CVE-2026-41375-OpenClaw: `/phone arm`/`/phone disarm` Bypasses `operator.admin` Scope Check for External Channels

openclaw/openclaw · GHSA-h2v7-xc88-xx8c

medium2026-04-07

CVE-2026-34972-OpenFGA's BatchCheck within-request deduplication produces incorrect authorization decisions via list-value cache-key collision

openfga/openfga · GHSA-jwvj-g8pc-cx45

high2026-04-07

CVE-2026-34148-Fedify affected by resource exhaustion caused by unbounded redirect following during remote key/document resolution

fedify-dev/fedify · GHSA-gm9m-gwc4-hwgp

low2026-04-07

CVE-2026-34781-Electron: Crash in clipboard.readImage() on malformed clipboard image data

electron/electron · GHSA-f37v-82c4-4x64

medium2026-04-07

CVE-2026-34765-Electron: Named window.open targets not scoped to the opener's browsing context

electron/electron · GHSA-f3pv-wv63-48x8

high2026-04-07

CVE-2026-34444-Lupa has a Sandbox escape and RCE due to incomplete attribute_filter enforcement in getattr / setattr

scoder/lupa · GHSA-69v7-xpr6-6gjm