AI Threat Alert

OpenClaw Vulnerabilities

pipAI Agents

AI Threat Alert tracks 582 known vulnerabilities in OpenClaw, 21 rated critical — an AI/ML ai agents in the pip ecosystem. Each CVE includes CVSS severity, EPSS exploit probability, patch status, and CISO-grade analysis.

Data sources
582
Total CVEs
21
Critical
pip
Ecosystem
Oct 14, 2026
Last CVE
32%
Patch Rate
5d
Avg Time to Patch

Known Vulnerabilities(582 total, page 3 of 24)

SeverityCVE IDSummaryCVSSPublished
MEDIUMCVE-2026-100563OpenClaw: CSV formula injection in session export5.4Sep 26, 2026MEDIUMCVE-2026-100562OpenClaw: authorization bypass in sessions.create5.4Sep 26, 2026HIGHCVE-2026-100561OpenClaw: exec approval bypass enables host command execution8.0Sep 26, 2026HIGHCVE-2026-100560OpenClaw: persistent exec approval bypass via path-only grants7.5Sep 26, 2026HIGHCVE-2026-100559OpenClaw: escaped-newline parsing bypasses exec allowlist8.0Sep 26, 2026HIGHCVE-2026-100558OpenClaw: WebSocket upgrade socket exhaustion DoS7.5Sep 26, 2026HIGHCVE-2026-100557OpenClaw: skill dispatch authz bypass exposes owner tools8.3Sep 26, 2026MEDIUMCVE-2026-100556OpenClaw: auth bypass lets WhatsApp group users switch models6.3Sep 26, 2026HIGHCVE-2026-100555OpenClaw: DNS rebinding SSRF in Synology Chat attachments7.1Sep 26, 2026MEDIUMCVE-2026-100554OpenClaw: Canvas HTTP auth persists after node revocation4.2Sep 26, 2026MEDIUMCVE-2026-100553OpenClaw: Feishu unpin bypasses cross-context policy4.3Sep 26, 2026HIGHCVE-2026-100552OpenClaw: Codex runtime bypasses per-chat tool policy8.8Sep 26, 2026HIGHCVE-2026-100551OpenClaw iOS: TLS pin bypass leaks Gateway credentials8.3Sep 26, 2026MEDIUMCVE-2026-100550OpenClaw: Teams allowlist bypass lets outsiders trigger agent5.4Sep 26, 2026MEDIUMCVE-2026-100549OpenClaw: path traversal via QQBot voice filenames5.4Sep 26, 2026MEDIUMCVE-2026-100548OpenClaw: API key leak to fallback embedding provider5.3Sep 26, 2026MEDIUMCVE-2026-100547OpenClaw: file URL spelling bypass leaks local files5.5Sep 26, 2026MEDIUMCVE-2026-100546OpenClaw: voice race condition causes owner spoofing6.4Sep 26, 2026MEDIUMCVE-2026-100545OpenClaw: policy bypass lets helper run blocked tools5.3Sep 26, 2026HIGHCVE-2026-100544OpenClaw: authz bypass in voice-call exposes owner tools8.8Sep 26, 2026HIGHCVE-2026-100543OpenClaw: config hashes enable offline password cracking7.5Sep 26, 2026LOWCVE-2026-100542OpenClaw: tar.bz2 skill installer bypasses extraction limits3.1Sep 26, 2026HIGHCVE-2026-100541OpenClaw Matrix: case-folding auth bypass via ID collision7.5Sep 26, 2026MEDIUMCVE-2026-100540OpenClaw Feishu: disabled default account still used6.8Sep 26, 2026MEDIUMCVE-2026-100538OpenClaw: tool policy bypass allows local file read6.5Sep 26, 2026

Showing 51–75 of 582

← PreviousNext →

Frequently asked questions

What is OpenClaw?

OpenClaw is an AI/ML ai agents tracked by AI Threat Alert for security vulnerabilities in the pip ecosystem.

How many known vulnerabilities does OpenClaw have?

OpenClaw has 582 known CVEs, 21 of them critical, tracked from NVD and GitHub Advisory.

Which ecosystem is OpenClaw distributed in?

OpenClaw is distributed via the pip ecosystem and categorized as ai agents.

Where does the OpenClaw vulnerability data come from?

Vulnerability data is sourced from NVD and GitHub Advisory, enriched with CVSS, EPSS, exploit signals, and patch status for each CVE.

How do I assess the risk of OpenClaw?

Review each CVE below — every entry shows CVSS severity, EPSS exploit probability, exploitation signals, and whether a patched version is available.

Monitor OpenClaw in your stack

Get instant alerts when new vulnerabilities affect OpenClaw. CISO analysis, ATLAS technique mappings, and compliance reports included.

Start Monitoring