Security advisories

medium2026-03-03

CVE-2026-32043-OpenClaw's system.run approval TOCTOU via mutable symlink cwd target on node host

openclaw/openclaw · GHSA-mwcg-wfq3-4gjc

high2026-03-03

CVE-2026-32064-OpenClaw's andbox browser noVNC observer lacked VNC authentication

openclaw/openclaw · GHSA-25gx-x37c-7pph

high2026-03-03

CVE-2026-32027-OpenClaw DM pairing-store identities could satisfy group allowlist authorization

openclaw/openclaw · GHSA-jv6r-27ww-4gw4

medium2026-03-03

CVE-2026-32023-OpenClaw's dispatch-wrapper depth-cap mismatch can bypass shell-wrapper approval gating in system.run allowlist mode

openclaw/openclaw · GHSA-ccg8-46r6-9qgj

medium2026-03-03

CVE-2026-32053-OpenClaw's voice-call Twilio webhook replay could bypass manager dedupe because normalized event IDs were randomized per parse

openclaw/openclaw · GHSA-vqx8-9xxw-f2m7

medium2026-03-03

CVE-2026-32022-OpenClaw safeBins grep -e File Read Bypass (stdin-only policy bypass)

openclaw/openclaw · GHSA-3xfw-4pmr-4xc5

medium2026-03-03

OpenClaw: Unauthorized Telegram Senders Trigger Media Download and Disk Write Before Access Check

openclaw/openclaw · GHSA-h656-5vcf-cm23

high2026-03-03

OpenClaw: Native prompt image auto-load did not honor tools.fs.workspaceOnly in sandboxed runs

openclaw/openclaw · GHSA-9f72-qcpw-2hxc

medium2026-03-03

CVE-2026-22169-OpenClaw's non-default safeBins sort configuration can bypass intended allowlist approval constraints

openclaw/openclaw · GHSA-vmqr-rc7x-3446

high2026-03-03

CVE-2026-32036-OpenClaw has gateway plugin auth bypass via encoded dot-segment traversal in protected /api/channels paths

openclaw/openclaw · GHSA-mwxv-35wr-4vvj

medium2026-03-03

CVE-2026-32045-OpenClaw's gateway tokenless Tailscale auth applied to HTTP routes

openclaw/openclaw · GHSA-hff7-ccv5-52f8

medium2026-03-03

CVE-2026-22171-OpenClaw vulnerable to path traversal in Feishu media temp-file naming allows writes outside os.tmpdir()

openclaw/openclaw · GHSA-vj3g-5px3-gr46

medium2026-03-03

CVE-2025-15599-DOMPurify contains a Cross-site Scripting vulnerability

cure53/dompurify · GHSA-v8jm-5vwx-cfxm

medium2026-03-03

CVE-2026-0540-DOMPurify contains a Cross-site Scripting vulnerability

cure53/dompurify · GHSA-v2wj-7wpq-c8vv

low2026-03-03

CVE-2026-32040-OpenClaw Vulnerable to HTML injection via unvalidated image MIME type in data-URL interpolation

openclaw/openclaw · GHSA-2ww6-868g-2c56

medium2026-03-03

CVE-2026-32026-Temporary path handling could write outside OpenClaw temp boundary

openclaw/openclaw · GHSA-33hm-cq8r-wc49

medium2026-03-03

CVE-2026-32046-OpenClaw: Chrome --no-sandbox disabled OS-level browser sandbox in sandbox browser container

openclaw/openclaw · GHSA-43x4-g22p-3hrq

high2026-03-03

CVE-2026-32037-OpenClaw's MSTeams attachment redirect handling could bypass configured media host allowlists

openclaw/openclaw · GHSA-w76h-8m22-hpgh

high2026-03-03

CVE-2026-28393-OpenClaw's hook transform module path allows traversal and arbitrary JavaScript module loading

openclaw/openclaw · GHSA-7xhj-55q9-pc3m

high2026-03-03

CVE-2026-32000-OpenClaw has command injection via Windows shell fallback in Lobster tool execution

openclaw/openclaw · GHSA-7fcc-cw49-xm78