Verified Advisories
Concise advisories for CRITICAL/HIGH vulnerabilities – affected and fixed versions confirmed against the vendor's own advisory before publishing. 10 total.
Privilege escalation in OpenClaw cron jobs (CVE-2026-62202)
OpenClaw contains a privilege escalation vulnerability in isolated cron jobs whereby a lower-trust caller or misconfigured input path can execute or persist actions beyond the caller's intended authorization. The vuln...
Fixed in 2026.6.9
Environment variable injection in OpenClaw host exec (CVE-2026-62203)
OpenClaw contains an environment variable filtering vulnerability in host exec that fails to properly sanitize rustup startup variables. A lower-trust caller or configured input path can exploit this to execute or per...
Fixed in 2026.6.6
Authentication bypass in OpenClaw (CVE-2026-62207)
CVE-2026-62207 is an authentication bypass vulnerability in OpenClaw that allows lower-trust, identity-bearing HTTP callers to reach admin-scoped tools without sufficient authorization or policy checks on configured i...
Fixed in 2026.6.5
Authorization bypass in OpenClaw ClickClack agent-mode dispatch (CVE-2026-62209)
CVE-2026-62209 affects OpenClaw's ClickClack agent-mode dispatch feature, which contains an authorization bypass that could ignore the toolsAllow policy check. When the affected feature is enabled and reachable, a low...
Fixed in 2026.6.5
Authorization bypass in OpenClaw QQBot exec approvals (CVE-2026-62217)
CVE-2026-62217 is an authorization flaw in OpenClaw's QQBot exec approvals feature. When the feature is enabled and reachable, a lower-trust caller or configured input path can execute or persist actions beyond their ...
Fixed in 2026.5.27
Privilege escalation in OpenClaw via untrusted workspace plugin loading (CVE-2026-62222)
CVE-2026-62222 is a vulnerability in OpenClaw's setup-mode discovery feature that allows untrusted workspace plugins to be loaded. A lower-trust caller or an attacker with control over configured input paths can execu...
Fixed in 2026.5.22
Authorization bypass in OpenClaw's device (CVE-2026-62218)
CVE-2026-62218 is an authorization bypass vulnerability in OpenClaw's device.pair.approve feature. Lower-trust callers can reach the affected feature through configured input paths and perform actions that should requ...
Fixed in 2026.5.27
Authorization bypass in the device-pair approval feature of OpenClaw (CVE-2026-62223)
CVE-2026-62223 is an authorization bypass vulnerability in the device-pair approval feature of OpenClaw that allows a lower-trust caller or configured input path to execute or persist actions beyond the caller's inten...
Fixed in 2026.5.18
Authorization bypass in OpenClaw exec allowlist glob matching (CVE-2026-62229)
OpenClaw contains an authorization bypass vulnerability in its exec allowlist glob matching logic. A lower-trust caller can craft input paths that traverse allowlist glob patterns to execute or persist actions beyond ...
Fixed in 2026.5.18
Authorization bypass in OpenClaw node exec approvals (CVE-2026-62228)
CVE-2026-62228 is an authorization bypass vulnerability (CWE-863, CVSS 8.8 High) in OpenClaw's node exec approvals feature. A lower-trust caller or configured input path can execute or persist actions beyond the calle...
Fixed in 2026.6.5