Security advisories

medium2026-04-03

OpenClaw: Path traversal via inbound channel attachment path in ACP dispatch allows arbitrary file read

openclaw/openclaw · GHSA-58q2-7r52-jq62

high2026-04-03

CVE-2026-41404-OpenClaw: Incomplete scope-clearing fix allows operator.admin escalation via trusted-proxy auth mode

openclaw/openclaw · GHSA-g374-mggx-p6xc

high2026-04-03

OpenClaw: Media Parsing Path Traversal Leads to Arbitrary File Read

openclaw/openclaw · GHSA-f6pf-4gjx-c94r

high2026-04-03

OpenClaw: Agentic Consent Bypass — LLM Agent Can Silently Disable Exec Approval via `config.patch`

openclaw/openclaw · GHSA-v3qc-wrwx-j3pw

medium2026-04-03

CVE-2026-41335-OpenClaw Has a Gateway Control Interface Information Disclosure Vulnerability

openclaw/openclaw · GHSA-hr8g-2q7x-3f4w

medium2026-04-03

OpenClaw: Sandbox file operations use check-then-act, bypassing fd-based TOCTOU defenses

openclaw/openclaw · GHSA-rm5c-4rmf-vvhw

medium2026-04-03

OpenClaw: Image pixel-limit guard can fail open on sips and allow decompression-bomb DoS

openclaw/openclaw · GHSA-w85g-3h6x-4xh2

high2026-04-03

CVE-2026-41373-OpenClaw: Incomplete host-env-security-policy allows untrusted model to substitute compiler binaries via env overrides

openclaw/openclaw · GHSA-g8xp-qx39-9jq9

high2026-04-03

CVE-2026-41352-OpenClaw: Device-Paired Node Skips Node Scope Gate → Host RCE.md

openclaw/openclaw · GHSA-xj9w-5r6q-x6v4

medium2026-04-03

CVE-2026-41351-OpenClaw: Telnyx Webhook Replay Detection Bypass via Base64 Signature Re-encoding

openclaw/openclaw · GHSA-37v6-fxx8-xjmx

medium2026-04-03

CVE-2026-41330-OpenClaw: Host exec environment overrides miss proxy, TLS, Docker, and Git TLS controls

openclaw/openclaw · GHSA-9gp8-hjxr-6f34

medium2026-04-03

CVE-2026-41374-OpenClaw runs Discord audio preflight transcription before member authorization

openclaw/openclaw · GHSA-hhff-fj5f-qg48

low2026-04-03

CVE-2026-41347-OpenClaw: HTTP operator endpoints lack browser-origin validation in trusted-proxy mode

openclaw/openclaw · GHSA-mhr7-2xmv-4c4q

high2026-04-03

CVE-2026-41405-OpenClaw: MS Teams webhook parses body before JWT validation, enabling unauthenticated resource exhaustion

openclaw/openclaw · GHSA-p464-m8x6-vhv8

high2026-04-03

OpenClaw: Self-Whitelisting in appendLocalMediaParentRoots Allows Arbitrary File Read & Credential Exfiltration

openclaw/openclaw · GHSA-57gh-m6rq-54cf

medium2026-04-03

OpenClaw: Media download follows cross-origin redirects with Authorization headers intact

openclaw/openclaw · GHSA-68v4-hmwv-f43h

high2026-04-03

CVE-2026-41397-OpenClaw: OpenShell Mirror Sync — Sandbox Escape via Unrestricted File Sync + Symlink Traversal

openclaw/openclaw · GHSA-cwf8-44x6-32c2

high2026-04-03

CVE-2026-41396-OpenClaw: Workspace `.env` can override the bundled plugin trust root

openclaw/openclaw · GHSA-qcj9-wwgw-6gm8

high2026-04-03

CVE-2026-34780-Electron: Context Isolation bypass via contextBridge VideoFrame transfer

electron/electron · GHSA-jfqg-hf23-qpw2

medium2026-04-03

CVE-2026-34779-Electron: AppleScript injection in app.moveToApplicationsFolder on macOS

electron/electron · GHSA-5rqw-r77c-jp79