Security advisories

medium2026-03-26

CVE-2026-35632-OpenClaw: Symlink Traversal via IDENTITY.md appendFile in agents.create/update (Incomplete Fix for CVE-2026-32013)

openclaw/openclaw · GHSA-7xr2-q9vf-x4r5

medium2026-03-26

CVE-2026-35658-OpenClaw: Image Tool `tools.fs.workspaceOnly` Bypass via Sandbox Bridge Mounts

openclaw/openclaw · GHSA-cfp9-w5v9-3q4h

medium2026-03-26

CVE-2026-35655-OpenClaw's Conflicting Tool Identity Hints Bypass Dangerous-Tool Prompting

openclaw/openclaw · GHSA-74wf-h43j-vvmj

medium2026-03-26

CVE-2026-35635-OpenClaw Bypasses DM Policy Separation via Synology Chat Webhook Path Collision

openclaw/openclaw · GHSA-rqp8-q22p-5j9q

medium2026-03-26

CVE-2026-35662-OpenClaw leaf subagents can bypass controlScope restrictions to send messages to child sessions

openclaw/openclaw · GHSA-x2cm-hg9c-mf5w

medium2026-03-26

CVE-2026-35656-OpenClaw: Forwarding header spoofing bypasses gateway.trustedProxies origin detection

openclaw/openclaw · GHSA-844j-xrrq-wgh4

critical2026-03-26

CVE-2026-35639-OpenClaw Gateway: RCE and Privilege Escalation from operator.pairing to operator.admin via device.pair.approve

openclaw/openclaw · GHSA-hf68-49fm-59cq

medium2026-03-26

CVE-2026-35622-OpenClaw: Google Chat app-url webhook auth accepted non-deployment add-on principals

openclaw/openclaw · GHSA-mp66-rf4f-mhh8

low2026-03-26

CVE-2026-35624-OpenClaw: Nextcloud Talk room allowlist matched colliding room names instead of stable room tokens

openclaw/openclaw · GHSA-xhq5-45pm-2gjr

medium2026-03-26

CVE-2026-21724-Grafana OSS: Authorization bypass allows users with Editor role to modify protected webhook URLs without permissions

grafana/grafana · GHSA-7g92-g4vh-hp84

medium2026-03-26

CVE-2026-3190-Keycloak: Missing Role Enforcement on UMA 2.0 Permission Ticket Endpoint Leads to Information Disclosure

keycloak/keycloak · GHSA-q35r-vvhv-vx5h

medium2026-03-26

CVE-2026-3121-Keycloak: manage-clients permission escalates to full realm admin access

keycloak/keycloak · GHSA-7xf9-4jfc-wgm4

low2026-03-26

CVE-2026-35649-OpenClaw: Tlon settings empty-allowlist reconciliation bypassed intended revocation

openclaw/openclaw · GHSA-pw7h-9g6p-c378

medium2026-03-26

CVE-2026-35637-OpenClaw: Tlon cite expansion happens before channel and DM authorization is complete

openclaw/openclaw · GHSA-vfg3-pqpq-93m4

high2026-03-26

OpenClaw's mutating internal ACP chat commands missed operator.admin scope enforcement

openclaw/openclaw · GHSA-3w6x-gv34-mqpf

medium2026-03-26

CVE-2026-35652-OpenClaw: Mattermost callback dispatch allowed non-allowlisted sender actions

openclaw/openclaw · GHSA-8883-9w57-vwv6

medium2026-03-26

OpenClaw Exposes Credentials Embedded in baseUrl Fields via config.get and channels.status

openclaw/openclaw · GHSA-ppwq-6v66-5m6j

low2026-03-26

CVE-2026-35648-OpenClaw may have stale policy enforcement for queued node actions

openclaw/openclaw · GHSA-wj55-88gf-x564

high2026-03-26

CVE-2026-35650-OpenClaw has Inconsistent Host Exec Environment Override Sanitization

openclaw/openclaw · GHSA-39pp-xp36-q6mg

high2026-03-26

OpenClaw's Trusted-proxy Control UI sessions retain privileged scopes without device identity on device-less allow paths

openclaw/openclaw · GHSA-48vw-m3qc-wr99