Security advisories

critical2026-03-02

CVE-2026-32013-OpenClaw gateway agents.files symlink escape allowed out-of-workspace file read/write

openclaw/openclaw · GHSA-fgvx-58p6-gjwc

low2026-03-02

CVE-2026-32058-OpenClaw Node system.run approval context-binding weakness in approval-enabled host=node flows

openclaw/openclaw · GHSA-hjvp-qhm6-wrh2

high2026-03-02

CVE-2026-32062-OpenClaw voice-call media stream validated streams after upgrade, which could allow pre-start unauthenticated sockets to increase resource pressure

openclaw/openclaw · GHSA-mfg5-7q5g-f37j

high2026-03-02

CVE-2026-32049-OpenClaw's inbound media downloads could exceed configured byte limits before rejection across multiple channels

openclaw/openclaw · GHSA-rxxp-482v-7mrh

high2026-03-02

OpenClaw Canvas Path Traversal Information Disclosure Vulnerability

openclaw/openclaw · GHSA-jq4x-98m3-ggq6

medium2026-03-02

CVE-2026-22175-OpenClaw's exec allow-always can be bypassed via unrecognized multiplexer shell wrappers (busybox/toybox sh -c)

openclaw/openclaw · GHSA-gwqp-86q6-w47g

medium2026-03-02

OpenClaw: Node exec approvals could be replayed across nodes

openclaw/openclaw · GHSA-6x2m-hqfw-hvpj

medium2026-03-02

CVE-2026-29607-OpenClaw's allow-always wrapper persistence could bypass future approvals and enable command execution

openclaw/openclaw · GHSA-6j27-pc5c-m8w8

low2026-03-02

CVE-2026-32020-OpenClaw's Control UI Static File Handler Follows Symlinks and Allows Out-of-Root File Read

openclaw/openclaw · GHSA-5ghc-98wh-gwwf

medium2026-03-02

CVE-2026-32054-OpenClaw has browser trace/download path symlink escape in temp output handling

openclaw/openclaw · GHSA-36h3-7c54-j27r

medium2026-03-02

CVE-2026-22178-OpenClaw has ReDoS and regex injection via unescaped Feishu mention metadata in RegExp construction

openclaw/openclaw · GHSA-c6hr-w26q-c636

low2026-03-02

CVE-2026-31993-OpenClaw macOS companion app (beta): allowlist parsing mismatch for system.run shell chains

openclaw/openclaw · GHSA-5f9p-f3w2-fwch

high2026-03-02

CVE-2026-22168-OpenClaw has Windows system.run approval mismatch on cmd.exe /c trailing arguments

openclaw/openclaw · GHSA-5v6x-rfc3-7qfr

low2026-03-02

CVE-2026-31991-OpenClaw has Signal group allowlist authorization bypass via DM pairing-store leakage

openclaw/openclaw · GHSA-wm8r-w8pf-2v6w

high2026-03-02

@keep-network/tbtc-v2 revealing P2PKH deposit with a wrapped P2SH script

threshold-network/tbtc-v2 · GHSA-8986-v76q-8vr2

medium2026-03-02

CVE-2026-29049-`melange update-cache` has unbounded HTTP download that can exhaust disk in CI

chainguard-dev/melange · GHSA-7rp8-r62p-q6wc

medium2026-03-02

CVE-2026-28804-pypdf vulnerable to inefficient decoding of ASCIIHexDecode streams

py-pdf/pypdf · GHSA-9m86-7pmv-2852

high2026-03-02

CVE-2026-31997-OpenClaw: system.run approvals did not bind PATH-token executable identity, enabling post-approval executable rebind

openclaw/openclaw · GHSA-q399-23r3-hfx4

high2026-03-02

CVE-2026-31989-OpenClaw has web_search citation redirect SSRF via private-network-allowing policy

openclaw/openclaw · GHSA-g99v-8hwm-g76g

high2026-03-02

OpenClaw's authorization mismatch allowed write-scope agent runs to reach owner-only tools

openclaw/openclaw · GHSA-jr6x-2q95-fh2g