AI Threat Alert

OpenClaw Vulnerabilities

pipAI Agents

AI Threat Alert tracks 582 known vulnerabilities in OpenClaw, 21 rated critical — an AI/ML ai agents in the pip ecosystem. Each CVE includes CVSS severity, EPSS exploit probability, patch status, and CISO-grade analysis.

Data sources
582
Total CVEs
21
Critical
pip
Ecosystem
Oct 14, 2026
Last CVE
32%
Patch Rate
5d
Avg Time to Patch

Known Vulnerabilities(582 total, page 4 of 24)

SeverityCVE IDSummaryCVSSPublished
LOWCVE-2026-100537OpenClaw: memory recall bypasses sender tool policy3.1Sep 26, 2026MEDIUMCVE-2026-100536OpenClaw: path traversal leaks host files via Telegram6.5Sep 26, 2026HIGHCVE-2026-100535OpenClaw: session-memory flaw enables agent privilege escalation7.5Sep 26, 2026LOWCVE-2026-100534OpenClaw: authorization bypass cancels unrelated sessions3.1Sep 26, 2026MEDIUMCVE-2026-100533OpenClaw: Unicode path traversal reads files outside workspace5.3Sep 26, 2026HIGHCVE-2026-100530OpenClaw: exec approval reuse across directories7.3Sep 26, 2026MEDIUMCVE-2026-100529OpenClaw: authorization scope widening in file transfer6.4Sep 26, 2026MEDIUMCVE-2026-100528OpenClaw: credential leak to wrong endpoint on hot reload5.4Sep 26, 2026MEDIUMCVE-2026-100527OpenClaw: pre-auth DoS in browser relay5.3Sep 26, 2026MEDIUMCVE-2026-100526OpenClaw Discord: media policy bypass reads local files5.3Sep 26, 2026MEDIUMCVE-2026-100525OpenClaw: missing scope check exposes Prometheus metrics4.3Sep 26, 2026HIGHCVE-2026-44115OpenClaw: heredoc shell expansion bypasses exec allowlist8.8May 6, 2026HIGHCVE-2026-44118OpenClaw: owner spoofing via bearer token header7.8May 6, 2026HIGHCVE-2026-44116OpenClaw: SSRF in Zalo sendPhoto exposes internal resources8.6May 6, 2026MEDIUMCVE-2026-44117OpenClaw: SSRF in QQBot media upload bypasses URL checks5.8May 6, 2026HIGHCVE-2026-44114OpenClaw: dotenv namespace override enables runtime hijack7.8May 6, 2026CRITICALCVE-2026-44112OpenClaw: TOCTOU symlink race escapes OpenShell sandbox9.6May 6, 2026HIGHCVE-2026-44113OpenClaw: TOCTOU symlink race escapes sandbox mount7.7May 6, 2026MEDIUMCVE-2026-34510OpenClaw: UNC/file URL bypass in Windows media loaders5.3Apr 1, 2026CRITICALCVE-2026-22172OpenClaw: WebSocket scope self-elevation grants admin9.9Mar 20, 2026MEDIUMCVE-2026-95815OpenClaw iOS: deep-link URL logging exposes bearer keys6.3Sep 22, 2026MEDIUMCVE-2026-94094OpenClaw: unbounded file read enables canvas host DoS4.3Sep 20, 2026CRITICALCVE-2026-28474OpenClaw Nextcloud Talk: allowlist bypass via display name9.8Mar 5, 2026MEDIUMCVE-2026-28465OpenClaw voice-call: webhook auth bypass via headers5.9Mar 5, 2026LOWCVE-2026-91836OpenClaw ClawScan: incomplete comparison in static scanner2.8Sep 15, 2026

Showing 76–100 of 582

← PreviousNext →

Frequently asked questions

What is OpenClaw?

OpenClaw is an AI/ML ai agents tracked by AI Threat Alert for security vulnerabilities in the pip ecosystem.

How many known vulnerabilities does OpenClaw have?

OpenClaw has 582 known CVEs, 21 of them critical, tracked from NVD and GitHub Advisory.

Which ecosystem is OpenClaw distributed in?

OpenClaw is distributed via the pip ecosystem and categorized as ai agents.

Where does the OpenClaw vulnerability data come from?

Vulnerability data is sourced from NVD and GitHub Advisory, enriched with CVSS, EPSS, exploit signals, and patch status for each CVE.

How do I assess the risk of OpenClaw?

Review each CVE below — every entry shows CVSS severity, EPSS exploit probability, exploitation signals, and whether a patched version is available.

Monitor OpenClaw in your stack

Get instant alerts when new vulnerabilities affect OpenClaw. CISO analysis, ATLAS technique mappings, and compliance reports included.

Start Monitoring