en
OpenClaw Foundation is an independent nonprofit organization that stewards OpenClaw, an open-source AI assistant and agent infrastructure project. Its mission is to support personal, self-hosted AI that runs on user-controlled hardware and connects to messaging platforms, models, tools, and device nodes. The project is supported by a global community of contributors and maintainers.
As of 11/05/2026, OpenClaw recorded 91 security vulnerabilities in the last 90 days across 15 products, including 47 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, OpenClaw had the most security vulnerabilities in the OpenClaw ecosystem, with 65 vulnerabilities—approximately 71.43% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-53851OpenClaw < 2026.5.12 - Slack Reaction Event Notification BypassCVE-2026-53850OpenClaw < 2026.4.25 - Control Scope Enforcement Bypass in Focus CommandCVE-2026-53849OpenClaw < 2026.5.7 - Privilege Escalation via Mutable Discord Display Names in allowFromCVE-2026-53848OpenClaw < 2026.5.26 - Exec Allowlist Bypass via Transparent Command WrappersCVE-2026-53847OpenClaw < 2026.5.6 - Privilege Escalation via Active Memory Write Scope| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-53851OpenClaw < 2026.5.12 - Slack Reaction Event Notification Bypass | Exploitation statusNot exploited | FixYes |
| Published06/16/2026 |
| SeverityMedium |
CVE-2026-53850OpenClaw < 2026.4.25 - Control Scope Enforcement Bypass in Focus Command | Exploitation statusNot exploited | FixYes | Affected productOpenClaw | Published06/16/2026 | SeverityMedium |
|---|
CVE-2026-53849OpenClaw < 2026.5.7 - Privilege Escalation via Mutable Discord Display Names in allowFrom | Exploitation statusNot exploited | FixYes | Affected productOpenClaw | Published06/16/2026 | SeverityHigh |
|---|
CVE-2026-53848OpenClaw < 2026.5.26 - Exec Allowlist Bypass via Transparent Command Wrappers | Exploitation statusNot exploited | FixYes | Affected productOpenClaw | Published06/16/2026 | SeverityLow |
|---|
CVE-2026-53847OpenClaw < 2026.5.6 - Privilege Escalation via Active Memory Write Scope | Exploitation statusNot exploited | FixYes | Affected productOpenClaw | Published06/16/2026 | SeverityMedium |
|---|
CVE-2026-53846OpenClaw < 2026.4.29 - Arbitrary Package Manager Execution via Workspace .env npm_execpath | Exploitation statusNot exploited | FixYes | Affected productOpenClaw | Published06/16/2026 | SeverityHigh |
|---|
CVE-2026-53845OpenClaw < 2026.5.6 - Skill-Command Dispatch Hook Bypass via Before-Tool-Call Hook Skipping | Exploitation statusNot exploited | FixYes | Affected productOpenClaw | Published06/16/2026 | SeverityLow |
|---|
CVE-2026-53844OpenClaw < 2026.4.29 - Session Visibility Check Bypass in Shared Memory Search | Exploitation statusNot exploited | FixYes | Affected productOpenClaw | Published06/16/2026 | SeverityMedium |
|---|
CVE-2026-53843OpenClaw < 2026.5.26 - Node Token Revocation Bypass via Pairing-Scoped Device Session | Exploitation statusNot exploited | FixYes | Affected productOpenClaw | Published06/16/2026 | SeverityHigh |
|---|
CVE-2026-53842OpenClaw < 2026.5.2 - Arbitrary Python Runtime Execution via CLOUDSDK_PYTHON Environment Variable | Exploitation statusNot exploited | FixYes | Affected productOpenClaw | Published06/16/2026 | SeverityHigh |
|---|
CVE-2026-53841OpenClaw < 2026.5.12 - Cross-Site Scripting via Unsafe Markdown Links in Exported Session HTML | Exploitation statusNot exploited | FixYes | Affected productOpenClaw | Published06/16/2026 | SeverityLow |
|---|
CVE-2026-53840OpenClaw < 2026.5.12 - Custom Header Leakage via MCP Streamable HTTP Cross-Origin Redirects | Exploitation statusNot exploited | FixYes | Affected productOpenClaw | Published06/16/2026 | SeverityMedium |
|---|
CVE-2026-53839OpenClaw < 2026.5.7 - Hostname Prefix Matching Bypass in Trusted Retry Endpoint Validation | Exploitation statusNot exploited | FixYes | Affected productOpenClaw | Published06/12/2026 | SeverityMedium |
|---|
CVE-2026-53838OpenClaw < 2026.5.27 - Node Pairing State Mutation via Reconnection | Exploitation statusNot exploited | FixYes | Affected productOpenClaw | Published06/12/2026 | SeverityMedium |
|---|
CVE-2026-53837OpenClaw < 2026.5.6 - Missing Channel Type Validation in Mattermost Event Handlers | Exploitation statusNot exploited | FixYes | Affected productOpenClaw | Published06/12/2026 | SeverityMedium |
|---|
CVE-2026-53836OpenClaw < 2026.5.12 - Allowlist Bypass via PowerShell Encoded-Command Aliases | Exploitation statusNot exploited | FixYes | Affected productOpenClaw | Published06/12/2026 | SeverityHigh |
|---|
CVE-2026-53835OpenClaw < 2026.5.6 - Config-Write Enforcement Bypass in Feishu Dynamic-Agent Bindings | Exploitation statusNot exploited | FixYes | Affected productOpenClaw | Published06/12/2026 | SeverityLow |
|---|
CVE-2026-53834OpenClaw < 2026.4.27 - Authorization Bypass in QQBot Pre-dispatch Slash Commands | Exploitation statusNot exploited | FixYes | Affected productOpenClaw | Published06/12/2026 | SeverityHigh |
|---|
CVE-2026-53833QQBot for OpenClaw < 2026.4.29 - Authorization Bypass via QQBot Streaming Command | Exploitation statusNot exploited | FixYes | Affected productOpenClaw | Published06/12/2026 | SeverityHigh |
|---|
CVE-2026-53832OpenClaw < 2026.5.18 - Identity Header Forgery via Trusted-Proxy Configuration | Exploitation statusNot exploited | FixYes | Affected productOpenClaw | Published06/12/2026 | SeverityHigh |
|---|
CVE-2026-53831OpenClaw < 2026.5.18 - Arbitrary File Read via Shell Expansion in system.run Safe-bin Allowlist | Exploitation statusNot exploited | FixYes | Affected productOpenClaw | Published06/12/2026 | SeverityHigh |
|---|
CVE-2026-53830OpenClaw < 2026.4.22 - Webhook Secret Revocation Bypass via secrets.reload | Exploitation statusNot exploited | FixYes | Affected productOpenClaw | Published06/12/2026 | SeverityMedium |
|---|
CVE-2026-53829OpenClaw < 2026.5.18 - Command Truncation in Exec Approval Display | Exploitation statusNot exploited | FixYes | Affected productOpenClaw | Published06/12/2026 | SeverityHigh |
|---|
CVE-2026-53828OpenClaw < 2026.5.6 - Native Command Authorization Bypass via Owner-Command Enforcement | Exploitation statusNot exploited | FixYes | Affected productOpenClaw | Published06/12/2026 | SeverityHigh |
|---|
CVE-2026-53827OpenClaw < 2026.5.2 - Credential Exposure via Model-Supplied Loopback URLs in message.action Forwarding | Exploitation statusNot exploited | FixYes | Affected productOpenClaw | Published06/12/2026 | SeverityMedium |
|---|
CVE-2026-53826OpenClaw < 2026.4.26 - Information Disclosure via Sandboxed Session Spawn | Exploitation statusNot exploited | FixYes | Affected productOpenClaw | Published06/12/2026 | SeverityLow |
|---|
CVE-2026-53825OpenClaw < 2026.4.7 - Arbitrary Local File Read via memory-wiki Ingest with operator.write Scope | Exploitation statusNot exploited | FixYes | Affected productOpenClaw | Published06/12/2026 | SeverityHigh |
|---|
CVE-2026-53824Mattermost plugin for OpenClaw < 2026.4.24 - Slash Token Revocation Lag via Monitor Refresh Delay | Exploitation statusNot exploited | FixYes | Affected productOpenClaw | Published06/12/2026 | SeverityMedium |
|---|
CVE-2026-53823OpenClaw < 2026.5.3 - Privilege Escalation via Mutable Slack Display Names in allowFrom | Exploitation statusNot exploited | FixYes | Affected productOpenClaw | Published06/12/2026 | SeverityHigh |
|---|
CVE-2026-53822OpenClaw < 2026.5.18 - Command Argument Modification via Shell Wrapper Between Approval and Execution | Exploitation statusNot exploited | FixYes | Affected productOpenClaw | Published06/12/2026 | SeverityHigh |
|---|
CVE-2026-53821OpenClaw < 2026.5.18 - Scope Elevation in trusted-proxy Control UI WebSocket | Exploitation statusNot exploited | FixYes | Affected productOpenClaw | Published06/12/2026 | SeverityHigh |
|---|
CVE-2026-53820OpenClaw < 2026.5.12 - Exec Denylist Bypass in Bundle MCP Loopback Session Spawn | Exploitation statusNot exploited | FixYes | Affected productOpenClaw | Published06/12/2026 | SeverityMedium |
|---|
CVE-2026-53819OpenClaw < 2026.5.27 - Arbitrary Homebrew Executable Execution via Workspace .env Override | Exploitation statusNot exploited | FixYes | Affected productOpenClaw | Published06/11/2026 | SeverityHigh |
|---|
CVE-2026-53818OpenClaw < 2026.4.24 - Owner-Only Tool Policy Bypass via MCP Loopback | Exploitation statusNot exploited | FixYes | Affected productOpenClaw | Published06/11/2026 | SeverityMedium |
|---|
CVE-2026-53817OpenClaw < 2026.5.22 - Control UI Locality Spoofing in Device Pairing | Exploitation statusNot exploited | FixYes | Affected productOpenClaw | Published06/11/2026 | SeverityHigh |
|---|
CVE-2026-53816OpenClaw < 2026.5.18 - Exec Lifecycle Event Forgery via Paired Node | Exploitation statusNot exploited | FixYes | Affected productOpenClaw | Published06/11/2026 | SeverityHigh |
|---|
CVE-2026-53815OpenClaw < 2026.5.19 - Channel Allowlist Bypass in Message Read Actions | Exploitation statusNot exploited | FixYes | Affected productOpenClaw | Published06/11/2026 | SeverityHigh |
|---|
CVE-2026-53814OpenClaw < 2026.5.20 - Privilege Escalation via Hook-Triggered CLI MCP Tool Authority | Exploitation statusNot exploited | FixYes | Affected productOpenClaw | Published06/11/2026 | SeverityHigh |
|---|
CVE-2026-53813OpenClaw < 2026.4.25 - Arbitrary Artifact Loading via Fake Package Root Resolution | Exploitation statusNot exploited | FixYes | Affected productOpenClaw | Published06/11/2026 | SeverityHigh |
|---|
CVE-2026-53812OpenClaw < 2026.5.18 - Private-Network Navigation Bypass via Browser Act Interactions | Exploitation statusNot exploited | FixYes | Affected productOpenClaw | Published06/11/2026 | SeverityMedium |
|---|
CVE-2026-53811OpenClaw < 2026.5.7 - Privilege Escalation via Mutable Display Names in Matrix allowFrom | Exploitation statusNot exploited | FixYes | Affected productOpenClaw | Published06/11/2026 | SeverityHigh |
|---|
CVE-2026-53810OpenClaw < 2026.5.18 - Arbitrary Code Execution via Unscanned Marketplace Runtime Extension Metadata | Exploitation statusNot exploited | FixYes | Affected productOpenClaw | Published06/11/2026 | SeverityHigh |
|---|
CVE-2026-53809OpenClaw < 2026.4.25 - Provider Alias Confusion in Embedded Runner Policy | Exploitation statusNot exploited | FixYes | Affected productOpenClaw | Published06/11/2026 | SeverityMedium |
|---|
CVE-2026-53808OpenClaw < 2026.5.6 - Approval Policy Bypass in Skill Workshop Apply Flow | Exploitation statusNot exploited | FixYes | Affected productOpenClaw | Published06/11/2026 | SeverityMedium |
|---|
CVE-2026-53807OpenClaw < 2026.5.6 - Authorization Bypass in Telegram Interactive Callbacks via commands.allowFrom | Exploitation statusNot exploited | FixYes | Affected productOpenClaw | Published06/11/2026 | SeverityHigh |
|---|
CVE-2026-53806OpenClaw < 2026.5.12 - Shell Option Parsing Bypass in Exec Revalidation | Exploitation statusNot exploited | FixYes | Affected productOpenClaw | Published06/11/2026 | SeverityHigh |
|---|
CVE-2026-35674OpenClaw < 2026.5.18 - Scope Bypass via Inherited chat.send Route | Exploitation statusNot exploited | FixYes | Affected productOpenClaw | Published05/29/2026 | SeverityHigh |
|---|
CVE-2026-35673OpenClaw < 2026.4.29 - SSRF Policy Bypass via Browser Debug/Export Routes | Exploitation statusNot exploited | FixYes | Affected productOpenClaw | Published05/29/2026 | SeverityMedium |
|---|
CVE-2026-35630OpenClaw < 2026.5.18 - QQBot Missing Approver Identity Enforcement in Native Approval Buttons | Exploitation statusNot exploited | FixYes | Affected productOpenClaw | Published05/29/2026 | SeverityHigh |
|---|
CVE-2026-34507OpenClaw < 2026.4.29 - Policy Bypass in QQBot Admin Commands via DM-only and allowFrom Checks | Exploitation statusNot exploited | FixYes | Affected productOpenClaw | Published05/29/2026 | SeverityLow |
|---|
209 Results | Page 4 of 5