AIVirusDB
Menu
SearchTeam launch updates

vulnerability · openclaw

Native web search could ignore OpenClaw tool policy

Native web search could ignore OpenClaw tool policy. The official advisory identifies openclaw >= 2026.5.28, < 2026.6.6 as affected.

medium severityconfirmed confidencepatchedNo known exploitation

Quick answer

What defenders need to know

What is it?
Native web search could ignore OpenClaw tool policy. The official advisory identifies openclaw >= 2026.5.28, < 2026.6.6 as affected.
Who is affected?
openclaw >= 2026.5.28, < 2026.6.6
What should defenders do?
Upgrade openclaw to 2026.6.6 or later.
Is a fix available?
Yes. Upgrade to 2026.6.6.

01 / Response

What to do

  1. Upgrade openclaw to 2026.6.6 or later.
  2. Until upgraded, restrict the affected feature to trusted operators or disable it when it is not needed.

02 / Technical assessment

Evidence-backed analysis

OpenClaw's official security advisory assigns medium severity with CVSS 4.3 and references CWE-284, CWE-863.

  • Official advisory: Native web search could ignore OpenClaw tool policy.
  • Affected range: >= 2026.5.28, < 2026.6.6. First patched version: 2026.6.6.

How to interpret evidence and confidence

03 / Timeline

Disclosure timeline

  1. Advisory published

    OpenClaw published GHSA-v4f6-x5g5-2g4g.

04 / Standards crosswalk

Standards crosswalk

FrameworkControl IDStatusEvidence
Control IDCWE-284weakness reference
StatusSupported
Evidencecwe:CWE-284 (opens in a new tab)advisory:GHSA-v4f6-x5g5-2g4g (opens in a new tab)
Control IDCWE-863weakness reference
StatusSupported
Evidencecwe:CWE-863 (opens in a new tab)advisory:GHSA-v4f6-x5g5-2g4g (opens in a new tab)

05 / Primary sources

Source record

OpenClawOpenClaw Security Advisory GHSA-v4f6-x5g5-2g4ghttps://github.com/openclaw/openclaw/security/advisories/GHSA-v4f6-x5g5-2g4gRetrieved Aug 22, 2026 ↗