OpenClaw 2026.5.1 before 2026.7.1 Remote Code Execution via googlemeet.chrome

OpenClaw before 2026.7.1 Authorization Bypass via MCP Configuration

OpenClaw before 2026.7.1 Authorization Bypass via Codex Install

OpenClaw Codex before 2026.7.1 Authorization Bypass via Bind

OpenClaw before 2026.7.1 Remote Code Execution via cron tool

OpenClaw before 2026.8.1 Policy Bypass via Native Tools

OpenClaw < 2026.5.18 Authorization Bypass via Glob Matching

OpenClaw < 2026.6.5 Authorization Bypass via Node Exec Approvals

OpenClaw < 2026.5.18 Authorization Bypass via Device-pair

OpenClaw 2026.1.20 < 2026.5.27 Authorization Bypass via device.pair.approve

OpenClaw 2026.5.14-beta.1 < 2026.5.27 Authentication Bypass via exec approvals

OpenClaw < 2026.6.5 Authentication Bypass via Admin Tools

OpenClaw < 2026.6.6 Environment Variable Injection via rustup

OpenClaw 2026.6.1 < 2026.6.9 Privilege Escalation via Cron

OpenClaw < 2026.6.6 Authentication Bypass via Git ext transport

OpenClaw < 2026.6.6 Authentication Bypass via Environment Filtering

OpenClaw 2026.5.20 < 2026.6.9 Privilege Escalation via Plugin Install

OpenClaw < 2026.6.9 Authorization Bypass via flock wrapper

OpenClaw < 2026.5.26 - Node Token Revocation Bypass via Pairing-Scoped Device Session

OpenClaw < 2026.5.12 - Allowlist Bypass via PowerShell Encoded-Command Aliases

OpenClaw < 2026.5.6 - Native Command Authorization Bypass via Owner-Command Enforcement

OpenClaw < 2026.5.18 - Command Argument Modification via Shell Wrapper Between Approval and Execution

OpenClaw < 2026.5.18 - Scope Elevation in trusted-proxy Control UI WebSocket

OpenClaw < 2026.5.22 - Control UI Locality Spoofing in Device Pairing

OpenClaw < 2026.5.7 - Privilege Escalation via Mutable Display Names in Matrix allowFrom

OpenClaw < 2026.5.18 - Arbitrary Code Execution via Unscanned Marketplace Runtime Extension Metadata

OpenClaw < 2026.5.6 - Authorization Bypass in Telegram Interactive Callbacks via commands.allowFrom

OpenClaw < 2026.5.12 - Shell Option Parsing Bypass in Exec Revalidation

OpenClaw < 2026.5.18 - Scope Bypass via Inherited chat.send Route

OpenClaw < 2026.4.23 - Unsafe Config Mutation via Gateway Tool Denylist Bypass

OpenClaw < 2026.4.22 - Shell Expansion Bypass in Unquoted Heredocs via Exec Allowlist

OpenClaw < 2026.4.15 - Authorization Bypass in Matrix Room Control Commands via DM Pairing Store

OpenClaw < 2026.4.10 - Insufficient Environment Variable Denylist in Exec Policy

OpenClaw < 2026.4.10 - Untrusted Workspace Plugin Shadow Resolution in Channel Setup

OpenClaw < 2026.4.9 - Untrusted Provider Plugin Auto-enablement via Workspace Provider Auth

OpenClaw < 2026.4.9 - Environment Variable Injection via Workspace .env File

OpenClaw 2026.2.23 < 2026.4.12 - Weakened Exec Approval Binding via busybox and toybox Applet Execution

OpenClaw 2026.2.22 < 2026.4.12 - Shell-Wrapper Detection Bypass via Environment Variable Assignment Injection

OpenClaw 2026.4.5 < 2026.4.10 - Sandbox Escape via host Parameter Override in Exec Routing

OpenClaw < 2026.4.8 - Improper Authorization in node.pair.approve via operator.write Scope

OpenClaw < 2026.4.8 - Role Bypass in device.token.rotate Function

OpenClaw < 2026.3.31 - Operator Admin Privilege Escalation via Trusted-Proxy Authentication

OpenClaw < 2026.3.31 - Privilege Escalation to Remote Code Execution via Unrestricted node.event Agent Dispatch

OpenClaw < 2026.3.28 - Privilege Escalation via operator.write to Admin-Class Telegram Config and Cron Persistence

OpenClaw < 2026.3.31 - Remote Code Execution via Node Scope Gate Bypass

OpenClaw < 2026.3.28 - Agentic Consent Bypass via config.patch

OpenClaw < 2026.3.28 - Privilege Escalation via chat.send /verbose Parameter

OpenClaw < 2026.3.28 - Authorization Bypass in Discord Text Approval Commands

OpenClaw < 2026.3.25 - Privilege Escalation via Gateway Plugin HTTP Authentication Scope

OpenClaw < 2026.3.22 - Allowlist Bypass via Unregistered Time Dispatch Wrapper