MEDIUM6.5npm
GHSA-g34w-4xqq-h79m· CVE-2026-26328OpenClaw iMessage group allowlist authorization inherited DM pairing-store identities
Modified: 2/20/2026
package
npm/clawdbot
pkg:npm/clawdbot
HIGH7.1npm
GHSA-3fqr-4cg8-h96q· CVE-2026-26317OpenClaw affected by cross-site request forgery (CSRF) through loopback browser mutation endpoints
Modified: 2/20/2026
LOWnpm
GHSA-chm2-m3w2-wcxmOpenClaw Google Chat spoofing access with allowlist authorized mutable email principal despite sender-ID mismatch
Modified: 2/17/2026
HIGH8.8npm
GHSA-g8p2-7wf7-98mq· CVE-2026-25253OpenClaw/Clawdbot has 1-Click RCE via Authentication Token Exfiltration From gatewayUrl
Modified: 2/3/2026
MEDIUM6.5npm
GHSA-h89v-j3x9-8wqj· CVE-2026-28452OpenClaw affected by denial of service through unguarded archive extraction allowing high expansion/resource abuse (ZIP/TAR)
Modified: 3/6/2026
HIGH8.8npm
GHSA-mc68-q9jw-2h3v· CVE-2026-24763OpenClaw/Clawdbot Docker Execution has Authenticated Command Injection via PATH Environment Variable
Modified: 2/3/2026
MEDIUM5.9npm
GHSA-mj5r-hh7j-4gxf· CVE-2026-28480OpenClaw Telegram allowlist authorization accepted mutable usernames
Modified: 3/6/2026
HIGH7.7npm
GHSA-q284-4pvr-m585· CVE-2026-25157OpenClaw/Clawdbot has OS Command Injection via Project Root Path in sshNodeCommand
Modified: 2/4/2026
HIGH7.5npm
GHSA-q447-rj3r-2cgh· CVE-2026-28478OpenClaw affected by denial of service via unbounded webhook request body buffering
Modified: 3/5/2026
CRITICAL9.8npm
GHSA-rq6g-px6m-c248· CVE-2026-28469OpenClaw Google Chat shared-path webhook target ambiguity allowed cross-account policy-context misrouting
Modified: 3/6/2026
MEDIUM5.5npm
GHSA-w2cg-vxx6-5xjg· CVE-2026-29612OpenClaw: denial of service through large base64 media files allocating large buffers before limit checks
Modified: 3/6/2026