AI Threat Alert

OpenClaw Vulnerabilities

pip AI Agents

AI Threat Alert tracks 427 known vulnerabilities in OpenClaw, 15 rated critical — an AI/ML ai agents in the pip ecosystem. Each CVE includes CVSS severity, EPSS exploit probability, patch status, and CISO-grade analysis.

Data sources

427

Total CVEs

15

Critical

pip

Ecosystem

Jul 8, 2026

Last CVE

41%

Patch Rate

3d

Avg Time to Patch

Known Vulnerabilities (427 total, page 1 of 18)

Severity CVE ID Summary CVSS Published

HIGH CVE-2026-59261 OpenClaw: dotenv override leaks provider credentials 7.1 Jul 8, 2026 HIGH GHSA-rggc-m335-3wvj OpenClaw: forged identity headers bypass proxy auth -- Jul 2, 2026 HIGH GHSA-mgq6-vr84-7m2j OpenClaw: QQBot approval button auth bypass 8.0 Jul 2, 2026 HIGH GHSA-mhq8-78pj-5j79 OpenClaw: safe-bin bypass exposes node-local files 7.1 Jul 2, 2026 HIGH GHSA-hw9r-h9mr-4jff OpenClaw: chat.send routing bypasses admin auth scopes 8.8 Jul 2, 2026 MEDIUM GHSA-p2fh-f5fc-44hr OpenClaw: memory-wiki ingest reads arbitrary local files 6.5 Jul 2, 2026 MEDIUM GHSA-wv26-j37q-2g7p OpenClaw: exec approver can bypass plugin approval gate -- Jul 2, 2026 HIGH GHSA-83w9-h5wv-j9xm OpenClaw: TOCTOU race bypasses node approval scope -- Jul 2, 2026 HIGH GHSA-jvm4-4j77-39p6 OpenClaw: QQBot command bypasses config allowlist -- Jul 2, 2026 MEDIUM GHSA-cqwv-9qjx-vxw2 OpenClaw: agent tool call bypasses skill approval gate 5.3 Jul 2, 2026 HIGH GHSA-c29c-2q9c-pc86 OpenClaw: Slack allowFrom bypass via display-name spoof -- Jul 2, 2026 HIGH GHSA-qjpc-qf9m-xwmr OpenClaw: WebSocket scope bypass grants admin authority 8.8 Jul 2, 2026 MEDIUM GHSA-gp79-m99v-gjmh OpenClaw: fail-open bypasses Mattermost DM channel policy -- Jul 2, 2026 CRITICAL GHSA-w4v6-g3wm-w36c OpenClaw: QQBot admin auth bypass skips access checks -- Jul 2, 2026 MEDIUM GHSA-grc3-2j34-p6gm OpenClaw: action forwarding leaks Gateway credentials -- Jul 2, 2026 MEDIUM GHSA-hcm3-8f6r-6xwg OpenClaw: missing authz reuses blocked SSRF tabs 6.5 Jul 2, 2026 HIGH GHSA-xr4f-mjxj-w6w5 OpenClaw: chat auth bypass enables device pairing hijack 8.3 Jul 2, 2026 MEDIUM GHSA-77pv-3w4q-vrj5 OpenClaw: QQBot slash commands bypass allowFrom auth -- Jul 2, 2026 MEDIUM GHSA-6c4r-g249-wv3c OpenClaw: sandbox leaks host workspace path to child -- Jul 2, 2026 LOW GHSA-3wqp-prf6-2m72 OpenClaw: Feishu agent-binding auth bypass 3.1 Jul 2, 2026 MEDIUM GHSA-275c-xpvc-jgfw OpenClaw: Slack/Zalo webhook secrets outlive rotation -- Jul 2, 2026 MEDIUM GHSA-4m3v-q747-pc6h OpenClaw: slash token revocation lag allows reuse -- Jul 2, 2026 HIGH GHSA-w5ww-7chg-mxcq OpenClaw: Telegram callback bypasses sender allowlist -- Jul 2, 2026 HIGH GHSA-77q5-rr5v-x43q OpenClaw: retry hostname check leaks auth material -- Jul 2, 2026 HIGH GHSA-j472-gf56-x589 OpenClaw: PowerShell alias bypasses exec allowlist -- Jul 2, 2026

Showing 1–25 of 427

Frequently asked questions

What is OpenClaw?

OpenClaw is an AI/ML ai agents tracked by AI Threat Alert for security vulnerabilities in the pip ecosystem.

How many known vulnerabilities does OpenClaw have?

OpenClaw has 427 known CVEs, 15 of them critical, tracked from NVD and GitHub Advisory.

Which ecosystem is OpenClaw distributed in?

OpenClaw is distributed via the pip ecosystem and categorized as ai agents.

Where does the OpenClaw vulnerability data come from?

Vulnerability data is sourced from NVD and GitHub Advisory, enriched with CVSS, EPSS, exploit signals, and patch status for each CVE.

How do I assess the risk of OpenClaw?

Review each CVE below — every entry shows CVSS severity, EPSS exploit probability, exploitation signals, and whether a patched version is available.

Monitor OpenClaw in your stack

Get instant alerts when new vulnerabilities affect OpenClaw. CISO analysis, ATLAS technique mappings, and compliance reports included.

Start Monitoring