Security advisories

high2026-02-18

CVE-2026-26323-OpenClaw has a command injection in maintainer clawtributors updater

openclaw/openclaw · GHSA-m7x8-2w3w-pr42

high2026-02-18

CVE-2026-26329-OpenClaw has a path traversal in browser upload allows local file read

openclaw/openclaw · GHSA-cv7m-c9jx-vg7q

medium2026-02-18

CVE-2026-26328-OpenClaw iMessage group allowlist authorization inherited DM pairing-store identities

openclaw/openclaw · GHSA-g34w-4xqq-h79m

high2026-02-18

CVE-2026-26327-OpenClaw allows unauthenticated discovery TXT records to steer routing and TLS pinning

openclaw/openclaw · GHSA-pv58-549p-qh99

low2026-02-17

OpenClaw Google Chat spoofing access with allowlist authorized mutable email principal despite sender-ID mismatch

openclaw/openclaw · GHSA-chm2-m3w2-wcxm

medium2026-02-17

CVE-2026-26326-OpenClaw skills.status could leak secrets to operator.read clients

openclaw/openclaw · GHSA-8mh7-phf8-xgfm

high2026-02-17

CVE-2026-26325-OpenClaw Node host system.run rawCommand/command mismatch can bypass allowlist/approvals

openclaw/openclaw · GHSA-h3f9-mjwj-w476

high2026-02-17

CVE-2026-26324-OpenClaw has a SSRF guard bypass via full-form IPv4-mapped IPv6 (loopback / metadata reachable)

openclaw/openclaw · GHSA-jrvc-8ff5-2f9f

high2026-02-17

CVE-2026-26322-OpenClaw Gateway tool allowed unrestricted gatewayUrl override

openclaw/openclaw · GHSA-g6q9-8fvw-f7rf

high2026-02-17

CVE-2026-26321-OpenClaw has a local file disclosure via sendMediaFeishu in Feishu extension

openclaw/openclaw · GHSA-8jpq-5h99-ff5r

high2026-02-17

CVE-2026-26320-OpenClaw macOS deep link confirmation truncation can conceal executed agent message

openclaw/openclaw · GHSA-7q2j-c4q5-rm27

high2026-02-17

CVE-2026-26319-OpenClaw is Missing Webhook Authentication in Telnyx Provider Allows Unauthenticated Requests

openclaw/openclaw · GHSA-4hg8-92x6-h2f3

high2026-02-17

CVE-2026-28447-OpenClaw has a Path Traversal in Plugin Installation

openclaw/openclaw · GHSA-qrq5-wjgg-rvqw

high2026-02-17

CVE-2026-28473-OpenClaw authorization bypass: operator.write can resolve exec approvals via chat.send -> /approve

openclaw/openclaw · GHSA-mqpw-46fh-299h

medium2026-02-17

CVE-2026-28481-OpenClaw MS Teams inbound attachment downloader leaks bearer tokens to allowlisted suffix domains

openclaw/openclaw · GHSA-7vwx-582j-j332

high2026-02-17

CVE-2026-28448-OpenClaw Twitch allowFrom is not enforced in optional plugin, unauthorized chat users can trigger agent pipeline

openclaw/openclaw · GHSA-33rq-m5x2-fvgf

critical2026-02-17

CVE-2026-28446-OpenClaw has an inbound allowlist policy bypass in voice-call extension (empty caller ID + suffix matching)

openclaw/openclaw · GHSA-4rj2-gpmh-qq5x

critical2026-02-17

CVE-2026-28474-Nextcloud Talk allowlist bypass via actor.name display name spoofing

openclaw/openclaw · GHSA-r5h9-vjqc-hq3r

critical2026-02-17

CVE-2026-28454-OpenClaw has a potential access-group authorization bypass if channel type lookup fails

openclaw/openclaw · GHSA-fhvm-j76f-qmjv

medium2026-02-17

CVE-2026-28471-OpenClaw has a Matrix allowlist bypass via displayName and cross-homeserver localpart matching

openclaw/openclaw · GHSA-rmxw-jxxx-4cpc