OpenClaw Core
Public security intelligence assigned to this project. Records from the wider ecosystem are not included unless they carry this exact project tag.
Preview Radar for this projectproject:openclaw-core- Exact-tag public records
- 22
- Distinct cited source URLs
- 22
- Latest record verification
Counts describe the approved public dataset, not the project's overall security. Zero records do not establish that a project is safe. Source URLs are citations, not a count of independent confirmations.
Recorded patch status
- Patched
- 22
- Unpatched
- 0
- Workaround only
- 0
- Unknown
- 0
Status belongs to each published record and its affected versions. A patched record does not confirm that your installation is updated.
Public evidence
| Score | Threat | Ecosystem | Status | Verified |
|---|---|---|---|---|
| 53Medium risk | MCP loopback could expose owner-only tools to non-owner runsGHSA-52xj-c9p8-78cv · OPENCLAW EXPLOIT | openclaw + mcp | Patched | |
| 50Medium risk | flock wrapper could bypass durable exec approval bindingGHSA-3fp5-v549-9v66 · OPENCLAW EXPLOIT | openclaw | Patched | |
| 50Medium risk | Discord guild actions could skip cross-provider requester authorizationGHSA-3pmr-x9g8-m55r · OPENCLAW EXPLOIT | openclaw | Patched | |
| 50Medium risk | Browser CDP discovery could accept blocked WebSocket URLsGHSA-3x84-qq85-fj65 · OPENCLAW EXPLOIT | openclaw | Patched | |
| 50Medium risk | Sandbox bind mounts could bypass parent-directory denylist checksGHSA-575v-8hfq-m3mc · OPENCLAW EXPLOIT | openclaw | Patched | |
| 50Medium risk | Plugin install commands could allow non-owner persistenceGHSA-7vrr-rp4x-4g76 · OPENCLAW EXPLOIT | openclaw | Patched | |
| 50Medium risk | Host exec environment filtering could allow Git ext transportGHSA-9969-8g9h-rxwm · OPENCLAW EXPLOIT | openclaw | Patched | |
| 50Medium risk | WhatsApp group IDs could satisfy elevated sender allowlistsGHSA-fh38-965w-f6c3 · OPENCLAW EXPLOIT | openclaw | Patched | |
| 50Medium risk | Host exec environment filtering could miss interpreter startup variablesGHSA-hjr6-g723-hmfm · OPENCLAW EXPLOIT | openclaw | Patched | |
| 50Medium risk | OpenAI-compatible HTTP model overrides could miss admin authorizationGHSA-jhfx-v2j8-x3m6 · OPENCLAW EXPLOIT | openclaw | Patched | |
| 50Medium risk | OpenShell mirror sync could follow remote symlink parentsGHSA-m38g-vpwj-mpg9 · OPENCLAW EXPLOIT | openclaw | Patched | |
| 50Medium risk | Sandbox exec-server HTTP requests could reach internal networksGHSA-mgvr-6gvw-3rgr · OPENCLAW EXPLOIT | openclaw | Patched | |
| 50Medium risk | Isolated cron jobs could regain denied exec toolsGHSA-mm9g-83wh-mhwj · OPENCLAW EXPLOIT | openclaw | Patched | |
| 50Medium risk | MS Teams message actions could miss requester authorizationGHSA-p5xh-frrh-cmgj · OPENCLAW EXPLOIT | openclaw | Patched | |
| 50Medium risk | Message mutations could skip requester authorizationGHSA-v7hx-r36p-f68m · OPENCLAW EXPLOIT | openclaw | Patched | |
| 50Medium risk | Host exec environment filtering could miss rustup startup variablesGHSA-wxh3-g47h-q3mc · OPENCLAW EXPLOIT | openclaw | Patched | |
| 44Medium risk | OpenClaw: QQBot pre-dispatch slash commands could skip allowFrom checksGHSA-77pv-3w4q-vrj5 · CVE-2026-53834 · OPENCLAW EXPLOIT | openclaw | Patched | |
| 44Medium risk | OpenClaw workspace configuration could alter dependency setupGHSA-24vr-rprv-67rf · CVE-2026-53846 · OPENCLAW EXPLOIT | openclaw | Patched | |
| 40Medium risk | Native web search could ignore OpenClaw tool policyGHSA-v4f6-x5g5-2g4g · OPENCLAW EXPLOIT | openclaw | Patched | |
| 40Medium risk | Plugin install wrappers could skip install policyGHSA-wgq8-x5wm-g4rw · OPENCLAW EXPLOIT | openclaw | Patched | |
| 34Low risk | OpenClaw webhook rotation could leave a stale-secret windowGHSA-275c-xpvc-jgfw · CVE-2026-53830 · OPENCLAW EXPLOIT | openclaw | Patched | |
| 34Low risk | OpenClaw browser actions could bypass private-network navigation checksGHSA-2hfg-4fh4-qp7f · CVE-2026-53812 · OPENCLAW EXPLOIT | openclaw | Patched |
Cited sources
- OpenClaw Security Advisory GHSA-52xj-c9p8-78cv
OpenClaw - OpenClaw Security Advisory GHSA-3fp5-v549-9v66
OpenClaw - OpenClaw Security Advisory GHSA-3pmr-x9g8-m55r
OpenClaw - OpenClaw Security Advisory GHSA-3x84-qq85-fj65
OpenClaw - OpenClaw Security Advisory GHSA-575v-8hfq-m3mc
OpenClaw - OpenClaw Security Advisory GHSA-7vrr-rp4x-4g76
OpenClaw - OpenClaw Security Advisory GHSA-9969-8g9h-rxwm
OpenClaw - OpenClaw Security Advisory GHSA-fh38-965w-f6c3
OpenClaw - OpenClaw Security Advisory GHSA-hjr6-g723-hmfm
OpenClaw - OpenClaw Security Advisory GHSA-jhfx-v2j8-x3m6
OpenClaw - OpenClaw Security Advisory GHSA-m38g-vpwj-mpg9
OpenClaw - OpenClaw Security Advisory GHSA-mgvr-6gvw-3rgr
OpenClaw - OpenClaw Security Advisory GHSA-mm9g-83wh-mhwj
OpenClaw - OpenClaw Security Advisory GHSA-p5xh-frrh-cmgj
OpenClaw - OpenClaw Security Advisory GHSA-v7hx-r36p-f68m
OpenClaw - OpenClaw Security Advisory GHSA-wxh3-g47h-q3mc
OpenClaw - OpenClaw: QQBot pre-dispatch slash commands could skip allowFrom checks
github_ghsa_graphql - OpenClaw: Workspace .env npm_execpath could influence bundled runtime dependency install
github_ghsa_graphql - OpenClaw Security Advisory GHSA-v4f6-x5g5-2g4g
OpenClaw - OpenClaw Security Advisory GHSA-wgq8-x5wm-g4rw
OpenClaw - OpenClaw: Slack and Zalo webhook secrets could remain active after secrets.reload
github_ghsa_graphql - OpenClaw's browser act interactions could bypass private-network navigation checks
github_ghsa_graphql
Independent AIVirusDB analysis. Project names identify the scope of records, not affiliation or endorsement. Browse all projects.