AI Threat Alert

OpenClaw Vulnerabilities

pipAI Agents

AI Threat Alert tracks 582 known vulnerabilities in OpenClaw, 21 rated critical — an AI/ML ai agents in the pip ecosystem. Each CVE includes CVSS severity, EPSS exploit probability, patch status, and CISO-grade analysis.

Data sources
582
Total CVEs
21
Critical
pip
Ecosystem
Oct 14, 2026
Last CVE
32%
Patch Rate
5d
Avg Time to Patch

Known Vulnerabilities(582 total, page 9 of 24)

SeverityCVE IDSummaryCVSSPublished
MEDIUMCVE-2026-35659OpenClaw: DNS-SD metadata hijacks CLI routing4.6Apr 10, 2026MEDIUMCVE-2026-35658OpenClaw: sandbox bypass exposes host filesystem reads6.5Apr 10, 2026HIGHCVE-2026-35650OpenClaw: env var override bypass enables code execution7.5Apr 10, 2026MEDIUMCVE-2026-35647OpenClaw: access control bypass allows DM policy evasion5.3Apr 10, 2026MEDIUMCVE-2026-35649OpenClaw: access control bypass via allowlist reconciliation6.5Apr 10, 2026MEDIUMCVE-2026-35654OpenClaw: auth bypass on Teams feedback invoke5.3Apr 10, 2026MEDIUMCVE-2026-35652OpenClaw: auth bypass enables unauthorized action execution6.5Apr 10, 2026HIGHCVE-2026-35653OpenClaw: auth bypass enables agent profile destruction8.1Apr 10, 2026LOWCVE-2026-35648OpenClaw: policy bypass via stale queued node actions3.7Apr 10, 2026HIGHCVE-2026-35641OpenClaw: RCE via .npmrc override in plugin install7.8Apr 10, 2026HIGHCVE-2026-35643OpenClaw: WebView bridge injection enables Android RCE8.8Apr 10, 2026MEDIUMCVE-2026-35642OpenClaw: auth bypass injects restricted agent events4.3Apr 9, 2026HIGHCVE-2026-35645OpenClaw: privilege escalation via synthetic admin session scope8.1Apr 9, 2026HIGHCVE-2026-35639OpenClaw: scope bypass enables admin RCE via device pairing8.8Apr 9, 2026MEDIUMCVE-2026-35644OpenClaw: credential exposure via gateway channel URLs6.5Apr 9, 2026MEDIUMCVE-2026-35636OpenClaw: session isolation bypass exposes parent sessions6.5Apr 9, 2026MEDIUMCVE-2026-35633OpenClaw: unbounded memory alloc DoS via crafted HTTP errors5.3Apr 9, 2026MEDIUMCVE-2026-35635OpenClaw: webhook route hijack bypasses DM access controls4.8Apr 9, 2026MEDIUMCVE-2026-35631OpenClaw: auth bypass on ACP mutating commands6.5Apr 9, 2026HIGHCVE-2026-35632OpenClaw: symlink traversal enables RCE via agent config7.1Apr 9, 2026HIGHCVE-2026-35637OpenClaw: auth bypass via premature cite expansion7.3Apr 9, 2026MEDIUMCVE-2026-35634OpenClaw: auth bypass grants unauthenticated Canvas access5.1Apr 9, 2026HIGHCVE-2026-35638OpenClaw: priv escalation via trusted-proxy scope bypass8.8Apr 9, 2026MEDIUMCVE-2026-35622OpenClaw: auth bypass in Google Chat webhook5.9Apr 9, 2026MEDIUMCVE-2026-35628OpenClaw: webhook brute-force bypasses AI agent auth4.8Apr 9, 2026

Showing 201–225 of 582

← PreviousNext →

Frequently asked questions

What is OpenClaw?

OpenClaw is an AI/ML ai agents tracked by AI Threat Alert for security vulnerabilities in the pip ecosystem.

How many known vulnerabilities does OpenClaw have?

OpenClaw has 582 known CVEs, 21 of them critical, tracked from NVD and GitHub Advisory.

Which ecosystem is OpenClaw distributed in?

OpenClaw is distributed via the pip ecosystem and categorized as ai agents.

Where does the OpenClaw vulnerability data come from?

Vulnerability data is sourced from NVD and GitHub Advisory, enriched with CVSS, EPSS, exploit signals, and patch status for each CVE.

How do I assess the risk of OpenClaw?

Review each CVE below — every entry shows CVSS severity, EPSS exploit probability, exploitation signals, and whether a patched version is available.

Monitor OpenClaw in your stack

Get instant alerts when new vulnerabilities affect OpenClaw. CISO analysis, ATLAS technique mappings, and compliance reports included.

Start Monitoring