CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,476 CVEs published, 358 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,476
Show in the list
Critical, last 7 days
358
Show in the list
Healthcare-tagged, last 7 days
4
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product openclaw:openclaw. Show all products

641 CVEs, showing 1 to 50Page 1 of 13Next
CVESeverityTitlePublished
CVE-2026-25253High 8.8OpenClaw (aka clawdbot or Moltbot) before 2026.1.29 obtains a gatewayUrl value from a query string and automatically makes a WebSocket connection without prompting, sending a token value.Feb 1, 2026
CVE-2026-24763High 8.8OpenClaw (formerly Clawdbot) is a personal AI assistant you run on your own devices.Feb 2, 2026
CVE-2026-25157High 7.5OpenClaw is a personal AI assistant.Feb 4, 2026
CVE-2026-25475Medium 6.5OpenClaw is a personal AI assistant.Feb 4, 2026
CVE-2026-25593High 8.4OpenClaw is a personal AI assistant.Feb 6, 2026
CVE-2026-24764Low 3.7OpenClaw (formerly Clawdbot) is a personal AI assistant users run on their own devices.Feb 19, 2026
CVE-2026-25474High 7.5OpenClaw is a personal AI assistant.Feb 19, 2026
CVE-2026-26316High 7.5OpenClaw is a personal AI assistant.Feb 19, 2026
CVE-2026-26317High 7.1OpenClaw is a personal AI assistant.Feb 19, 2026
CVE-2026-26319High 7.5OpenClaw is a personal AI assistant.Feb 19, 2026
CVE-2026-26320Medium 6.5OpenClaw is a personal AI assistant.Feb 19, 2026
CVE-2026-26321High 7.5OpenClaw is a personal AI assistant.Feb 19, 2026
CVE-2026-26322High 7.6OpenClaw is a personal AI assistant.Feb 19, 2026
CVE-2026-26323High 8.8OpenClaw is a personal AI assistant.Feb 19, 2026
CVE-2026-26324High 7.5OpenClaw is a personal AI assistant.Feb 19, 2026
CVE-2026-26325High 7.2OpenClaw is a personal AI assistant.Feb 19, 2026
CVE-2026-26326Medium 4.3OpenClaw is a personal AI assistant.Feb 19, 2026
CVE-2026-26327Medium 6.5OpenClaw is a personal AI assistant.Feb 19, 2026
CVE-2026-26328Medium 6.5OpenClaw is a personal AI assistant.Feb 20, 2026
CVE-2026-26329Medium 6.5OpenClaw is a personal AI assistant.Feb 20, 2026
CVE-2026-26972Medium 6.7OpenClaw is a personal AI assistant.Feb 20, 2026
CVE-2026-27001High 7.8OpenClaw is a personal AI assistant.Feb 20, 2026
CVE-2026-27002Critical 9.8OpenClaw is a personal AI assistant.Feb 20, 2026
CVE-2026-27003Medium 5.5OpenClaw is a personal AI assistant.Feb 20, 2026
CVE-2026-27004Medium 5.5OpenClaw is a personal AI assistant.Feb 20, 2026
CVE-2026-27007Low 3.3OpenClaw is a personal AI assistant.Feb 20, 2026
CVE-2026-27008Medium 6.7OpenClaw is a personal AI assistant.Feb 20, 2026
CVE-2026-27009Medium 5.8OpenClaw is a personal AI assistant.Feb 20, 2026
CVE-2026-27484Medium 4.3OpenClaw is a personal AI assistant.Feb 21, 2026
CVE-2026-27485Medium 4.4OpenClaw is a personal AI assistant.Feb 21, 2026
CVE-2026-27486Medium 5.3OpenClaw is a personal AI assistant.Feb 21, 2026
CVE-2026-27487High 8.0OpenClaw is a personal AI assistant.Feb 21, 2026
CVE-2026-27488High 7.3OpenClaw is a personal AI assistant.Feb 21, 2026
CVE-2026-27576Medium 4.0OpenClaw is a personal AI assistant.Feb 21, 2026
CVE-2026-28363High 8.8In OpenClaw before 2026.2.23, tools.exec.safeBins validation for sort could be bypassed via GNU long-option abbreviations (such as --compress-prog) in allowlist mode, leading to approval-free executi…Feb 27, 2026
CVE-2026-28391Critical 9.8OpenClaw versions prior to 2026.2.2 fail to properly validate Windows cmd.exe metacharacters in allowlist-gated exec requests (non-default configuration), allowing attackers to bypass command approva…Mar 5, 2026
CVE-2026-28392Critical 9.8OpenClaw versions prior to 2026.2.14 contain a privilege escalation vulnerability in the Slack slash-command handler that incorrectly authorizes any direct message sender when dmPolicy is set to open…Mar 5, 2026
CVE-2026-28393Critical 9.8OpenClaw versions 2.0.0-beta3 prior to 2026.2.14 contain a path traversal vulnerability in hook transform module loading that allows arbitrary JavaScript execution.Mar 5, 2026
CVE-2026-28394Medium 6.5OpenClaw versions prior to 2026.2.15 contain a denial of service vulnerability in the web_fetch tool that allows attackers to crash the Gateway process through memory exhaustion by parsing oversized…Mar 5, 2026
CVE-2026-28395Critical 9.1OpenClaw version 2026.1.14-1 prior to 2026.2.12 contains an improper network binding vulnerability in the Chrome extension (must be installed and enabled) relay server that treats wildcard hosts as l…Mar 5, 2026
CVE-2026-28446Critical 9.8OpenClaw versions prior to 2026.2.1 with the voice-call extension installed and enabled contain an authentication bypass vulnerability in inbound allowlist policy validation that accepts empty caller…Mar 5, 2026
CVE-2026-28447Medium 6.5OpenClaw versions 2026.1.29-beta.1 prior to 2026.2.1 contain a path traversal vulnerability in plugin installation that allows malicious plugin package names to escape the extensions directory.Mar 5, 2026
CVE-2026-28448Critical 9.4OpenClaw versions 2026.1.29 prior to 2026.2.1 contain a vulnerability in the Twitch plugin (must be installed and enabled) in which it fails to enforce the allowFrom allowlist when allowedRoles is un…Mar 5, 2026
CVE-2026-28450High 8.2OpenClaw versions prior to 2026.2.12 with the optional Nostr plugin enabled expose unauthenticated HTTP endpoints at /api/channels/nostr/:accountId/profile and /api/channels/nostr/:accountId/profile/…Mar 5, 2026
CVE-2026-28451Critical 9.3OpenClaw versions prior to 2026.2.14 contain server-side request forgery vulnerabilities in the Feishu extension that allow attackers to fetch attacker-controlled remote URLs without SSRF protections…Mar 5, 2026
CVE-2026-28452Medium 6.5OpenClaw versions prior to 2026.2.14 contain a denial of service vulnerability in the extractArchive function within src/infra/archive.ts that allows attackers to consume excessive CPU, memory, and d…Mar 5, 2026
CVE-2026-28453Critical 9.8OpenClaw versions prior to 2026.2.14 fail to validate TAR archive entry paths during extraction, allowing path traversal sequences to write files outside the intended directory.Mar 5, 2026
CVE-2026-28454Critical 9.8OpenClaw versions prior to 2026.2.2 fail to validate webhook secrets in Telegram webhook mode (must be enabled), allowing unauthenticated HTTP POST requests to the webhook endpoint that trust attacke…Mar 5, 2026
CVE-2026-28456High 7.2OpenClaw versions 2026.1.5 prior to 2026.2.14 contain a vulnerability in the Gateway in which it does not sufficiently constrain configured hook module paths before passing them to dynamic import(),…Mar 5, 2026
CVE-2026-28457High 7.9OpenClaw versions prior to 2026.2.14 contain a path traversal vulnerability in sandbox skill mirroring (must be enabled) that uses the skill frontmatter name parameter unsanitized when copying skills…Mar 5, 2026
Page 1 of 13Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.