Ecosystem intelligence
openclaw
Officially sourced security advisories and defensive guidance for the OpenClaw ecosystem.
24 verified records0 unpatched0 confirmed exploited
| Score | Threat | Ecosystem | Status | Verified |
|---|---|---|---|---|
| 53Medium risk | MCP loopback could expose owner-only tools to non-owner runsGHSA-52xj-c9p8-78cv · OPENCLAW EXPLOIT | openclaw + mcp | Patched | |
| 50Medium risk | Feishu tools could ignore per-account disablementGHSA-2q7j-2vhx-56g8 · OPENCLAW EXPLOIT | openclaw | Patched | |
| 50Medium risk | Feishu permission tools could ignore per-account disablementGHSA-w8wf-3qvj-6xqf · OPENCLAW EXPLOIT | openclaw | Patched | |
| 50Medium risk | flock wrapper could bypass durable exec approval bindingGHSA-3fp5-v549-9v66 · OPENCLAW EXPLOIT | openclaw | Patched | |
| 50Medium risk | Discord guild actions could skip cross-provider requester authorizationGHSA-3pmr-x9g8-m55r · OPENCLAW EXPLOIT | openclaw | Patched | |
| 50Medium risk | Browser CDP discovery could accept blocked WebSocket URLsGHSA-3x84-qq85-fj65 · OPENCLAW EXPLOIT | openclaw | Patched | |
| 50Medium risk | Sandbox bind mounts could bypass parent-directory denylist checksGHSA-575v-8hfq-m3mc · OPENCLAW EXPLOIT | openclaw | Patched | |
| 50Medium risk | Plugin install commands could allow non-owner persistenceGHSA-7vrr-rp4x-4g76 · OPENCLAW EXPLOIT | openclaw | Patched | |
| 50Medium risk | Host exec environment filtering could allow Git ext transportGHSA-9969-8g9h-rxwm · OPENCLAW EXPLOIT | openclaw | Patched | |
| 50Medium risk | WhatsApp group IDs could satisfy elevated sender allowlistsGHSA-fh38-965w-f6c3 · OPENCLAW EXPLOIT | openclaw | Patched | |
| 50Medium risk | Host exec environment filtering could miss interpreter startup variablesGHSA-hjr6-g723-hmfm · OPENCLAW EXPLOIT | openclaw | Patched | |
| 50Medium risk | OpenAI-compatible HTTP model overrides could miss admin authorizationGHSA-jhfx-v2j8-x3m6 · OPENCLAW EXPLOIT | openclaw | Patched | |
| 50Medium risk | OpenShell mirror sync could follow remote symlink parentsGHSA-m38g-vpwj-mpg9 · OPENCLAW EXPLOIT | openclaw | Patched | |
| 50Medium risk | Sandbox exec-server HTTP requests could reach internal networksGHSA-mgvr-6gvw-3rgr · OPENCLAW EXPLOIT | openclaw | Patched | |
| 50Medium risk | Isolated cron jobs could regain denied exec toolsGHSA-mm9g-83wh-mhwj · OPENCLAW EXPLOIT | openclaw | Patched | |
| 50Medium risk | MS Teams message actions could miss requester authorizationGHSA-p5xh-frrh-cmgj · OPENCLAW EXPLOIT | openclaw | Patched | |
| 50Medium risk | Message mutations could skip requester authorizationGHSA-v7hx-r36p-f68m · OPENCLAW EXPLOIT | openclaw | Patched | |
| 50Medium risk | Host exec environment filtering could miss rustup startup variablesGHSA-wxh3-g47h-q3mc · OPENCLAW EXPLOIT | openclaw | Patched | |
| 44Medium risk | OpenClaw: QQBot pre-dispatch slash commands could skip allowFrom checksGHSA-77pv-3w4q-vrj5 · CVE-2026-53834 · OPENCLAW EXPLOIT | openclaw | Patched | |
| 44Medium risk | OpenClaw workspace configuration could alter dependency setupGHSA-24vr-rprv-67rf · CVE-2026-53846 · OPENCLAW EXPLOIT | openclaw | Patched | |
| 40Medium risk | Native web search could ignore OpenClaw tool policyGHSA-v4f6-x5g5-2g4g · OPENCLAW EXPLOIT | openclaw | Patched | |
| 40Medium risk | Plugin install wrappers could skip install policyGHSA-wgq8-x5wm-g4rw · OPENCLAW EXPLOIT | openclaw | Patched | |
| 34Low risk | OpenClaw webhook rotation could leave a stale-secret windowGHSA-275c-xpvc-jgfw · CVE-2026-53830 · OPENCLAW EXPLOIT | openclaw | Patched | |
| 34Low risk | OpenClaw browser actions could bypass private-network navigation checksGHSA-2hfg-4fh4-qp7f · CVE-2026-53812 · OPENCLAW EXPLOIT | openclaw | Patched |