Login Request a demo
OP
Vendor
openclaw
21 products with CVEs on record
694
CVEs
0
On KEV
9
New 30D
Products
OW
OpenClaw Windows Node
OpenClaw
8.8
6 CVEs0 on KEV6 new
OP
openclaw
openclaw
9.9
646 CVEs0 on KEV2 new
CL
ClawScan
OpenClaw
5.3
3 CVEs0 on KEV1 new
CL
clawhub
openclaw
6.5
5 CVEs0 on KEV0 new
CR
crabbox
openclaw
9.1
5 CVEs0 on KEV0 new
FE
feishu
openclaw
8.1
4 CVEs0 on KEV0 new
MS
msteams
openclaw
6.5
4 CVEs0 on KEV0 new
VO
voice-call
openclaw
8.8
3 CVEs0 on KEV0 new
CL
clawdbot
openclaw
7.1
2 CVEs0 on KEV0 new
DI
discord
openclaw
5.3
2 CVEs0 on KEV0 new
MA
matrix
openclaw
7.5
2 CVEs0 on KEV0 new
OP
Openclaw/feishu
Openclaw
8.1
2 CVEs0 on KEV0 new
SL
slack
openclaw
8.8
2 CVEs0 on KEV0 new
DI
diagnostics-prometheus
openclaw
4.3
1 CVEs0 on KEV0 new
GO
googlechat
openclaw
6.5
1 CVEs0 on KEV0 new
LI
line
openclaw
6.5
1 CVEs0 on KEV0 new
NE
nextcloud-talk
OpenClaw
9.8
1 CVEs0 on KEV0 new
OP
@openclaw/bluebubbles
openclaw
7.5
1 CVEs0 on KEV0 new
OI
OpenClaw iOS
OpenClaw
6.3
1 CVEs0 on KEV0 new
OP
Openclaw/voice-call
Openclaw
7.5
1 CVEs0 on KEV0 new
WH
whatsapp
openclaw
8.1
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-110689
CL
ClawScan
OpenClaw
5.3
0%
Oct 14OpenClaw ClawScan Static Scanner runner.go shouldSkipTargetPath protection mechanism
CVE-2026-101884
OW
OpenClaw Windows Node
OpenClaw
7.5
0%
Sep 30OpenClaw Windows Node before 2026.7.1 Remote Code Execution via Environment Override
CVE-2026-101883
OW
OpenClaw Windows Node
OpenClaw
5.4
0%
Sep 30OpenClaw Windows Node through 2026.9.4 SSRF via canvas.present
CVE-2026-101882
OW
OpenClaw Windows Node
OpenClaw
8.8
1%
Sep 30OpenClaw Windows Node before 2026.7.1 Remote Code Execution via system.execApprovals.set
CVE-2026-101881
OW
OpenClaw Windows Node
OpenClaw
6.5
0%
Sep 30OpenClaw Windows Node before 2026.7.1 Denial of Service
CVE-2026-101880
OW
OpenClaw Windows Node
OpenClaw
8.8
1%
Sep 30OpenClaw Windows Node before 2026.7.1 Authorization Bypass
CVE-2026-101879
OW
OpenClaw Windows Node
OpenClaw
6.5
0%
Sep 30OpenClaw Windows Node before 2026.7.1-3 Missing Authorization
CVE-2026-102807
OP
OpenClaw
OpenClaw
5.3
0%
Sep 29OpenClaw before 2026.9.4 Authorization Bypass via MCP App Standalone Ticket
CVE-2026-102806
OP
OpenClaw
OpenClaw
6.3
0%
Sep 29OpenClaw before 2026.9.5 Sandbox Isolation Bypass via Media Pipelines
CVE-2026-100604
CL
clawhub
openclaw
5.4
0%
Sep 26ClawHub Authentication Bypass via Former Publisher Skill Control
CVE-2026-100603
CL
clawhub
openclaw
5.4
0%
Sep 26ClawHub before 8c2de6c506 Skill Hiding via Coordinated Reports
CVE-2026-100602
CL
clawhub
openclaw
6.5
0%
Sep 26ClawHub Changelog Preview Information Disclosure via Authorization Bypass
CVE-2026-100601
CL
clawhub
openclaw
5.3
0%
Sep 26ClawHub SSRF via Unchecked DNS Resolution in Profile Image
CVE-2026-100600
CL
clawhub
openclaw
5.3
0%
Sep 26ClawHub before 8c2de6c506 Quota Exhaustion via Anonymous API
CVE-2026-100599
OP
OpenClaw
OpenClaw
8.8
0%
Sep 26OpenClaw 2026.5.1 before 2026.7.1 Remote Code Execution via googlemeet.chrome
CVE-2026-100598
OP
OpenClaw
OpenClaw
7.1
0%
Sep 26OpenClaw before 2026.7.1 Approval Binding Logic Error
CVE-2026-100597
OP
OpenClaw
OpenClaw
7.8
0%
Sep 26OpenClaw before 2026.7.1 Path Traversal via Filesystem Race
CVE-2026-100596
OP
OpenClaw
OpenClaw
8.8
0%
Sep 26OpenClaw before 2026.7.1 Authorization Bypass via MCP Configuration
CVE-2026-100595
OP
OpenClaw
OpenClaw
6.5
0%
Sep 26OpenClaw before 2026.7.1 Authorization Bypass via diagnostics
CVE-2026-100594
OP
OpenClaw
OpenClaw
6.5
0%
Sep 26OpenClaw before 2026.7.1 Authorization Bypass via trajectory export
CVE-2026-100593
OP
OpenClaw
OpenClaw
5.4
0%
Sep 26OpenClaw before 2026.7.1 Authentication Bypass via activation
CVE-2026-100592
OP
OpenClaw
OpenClaw
6.3
0%
Sep 26OpenClaw before 2026.7.1 Authentication Bypass via Memory Dreaming
CVE-2026-100591
OP
OpenClaw
OpenClaw
6.3
0%
Sep 26OpenClaw before 2026.7.1 Authentication Bypass via Active Memory
CVE-2026-100590
OP
OpenClaw
OpenClaw
4.3
0%
Sep 26OpenClaw before 2026.7.1 Authorization Bypass via voice set
CVE-2026-100589
OP
OpenClaw
OpenClaw
8.3
0%
Sep 26OpenClaw before 2026.7.1 Sandbox Bypass via Browser Node
CVE-2026-100588
OP
OpenClaw
OpenClaw
8.3
0%
Sep 26OpenClaw before 2026.7.1 Authentication Bypass via node.invoke
CVE-2026-100587
OP
OpenClaw
OpenClaw
8.8
0%
Sep 26OpenClaw before 2026.7.1 Authorization Bypass via Codex Install
CVE-2026-100586
OP
OpenClaw
OpenClaw
8.8
0%
Sep 26OpenClaw Codex before 2026.7.1 Authorization Bypass via Bind
CVE-2026-100585
OP
OpenClaw
OpenClaw
8.0
0%
Sep 26OpenClaw before 2026.7.1 Authentication Bypass via MCP Channel
CVE-2026-100584
OP
OpenClaw
OpenClaw
6.7
0%
Sep 26OpenClaw before 2026.7.1 Allowlist Bypass via Workspace Shadows
CVE-2026-100583
DI
discord
openclaw
4.3
0%
Sep 26OpenClaw Discord before 2026.7.1 Authorization Bypass
CVE-2026-100582
MS
msteams
openclaw
6.5
0%
Sep 26OpenClaw Channel Plugins before 2026.8.1 Channel Read Allowlist Bypass
CVE-2026-100581
OP
OpenClaw
OpenClaw
5.5
0%
Sep 26OpenClaw iOS before 2026.8.11 Credential Storage via Share Extension
CVE-2026-100580
OP
OpenClaw
OpenClaw
8.8
0%
Sep 26OpenClaw before 2026.7.1 Remote Code Execution via cron tool
CVE-2026-100579
OP
OpenClaw
OpenClaw
7.6
0%
Sep 26OpenClaw before 2026.7.1 Authentication Bypass via Spoofed Requester
CVE-2026-100578
OP
OpenClaw
OpenClaw
7.6
0%
Sep 26OpenClaw before 2026.7.1 Authorization Bypass via chat.send
CVE-2026-100577
OP
OpenClaw
OpenClaw
6.3
0%
Sep 26OpenClaw before 2026.8.1 Server-Side Request Forgery via Video Asset
CVE-2026-100576
OP
OpenClaw
OpenClaw
5.4
0%
Sep 26OpenClaw before 2026.8.1 SSRF via Browser Wait Predicates
CVE-2026-100575
SL
slack
openclaw
8.8
0%
Sep 26OpenClaw Slack before 2026.8.1 Authentication Bypass via Group DM
CVE-2026-100574
OP
OpenClaw
OpenClaw
5.9
0%
Sep 26OpenClaw before 2026.8.1 SSRF via Trusted-Host DNS
CVE-2026-100573
OP
OpenClaw
OpenClaw
3.3
0%
Sep 26OpenClaw before 2026.8.1 Sandbox Policy Bypass via MCP Loopback
CVE-2026-100572
OP
OpenClaw
OpenClaw
5.3
0%
Sep 26OpenClaw before 2026.8.1 Denial of Service via Rate Limit
CVE-2026-100571
OP
OpenClaw
OpenClaw
5.3
0%
Sep 26OpenClaw before 2026.8.1 SMS Webhook Rate Limit Bypass
CVE-2026-100570
OP
OpenClaw
OpenClaw
7.8
0%
Sep 26OpenClaw before 2026.8.1 Remote Code Execution via CLOUDSDK_PYTHON_ARGS
CVE-2026-100569
OP
OpenClaw
OpenClaw
5.5
0%
Sep 26OpenClaw before 2026.8.1 Credential Exposure via Endpoint Override
CVE-2026-100568
OP
OpenClaw
OpenClaw
8.3
0%
Sep 26OpenClaw before 2026.8.1 Unauthorized Command Job Access
CVE-2026-100567
OP
OpenClaw
OpenClaw
8.2
0%
Sep 26OpenClaw before 2026.8.1 DNS Rebinding via CDP Hostname
CVE-2026-100566
LI
line
openclaw
6.5
0%
Sep 26OpenClaw LINE before 2026.8.1 Access Control Inheritance
CVE-2026-100564
OP
OpenClaw
OpenClaw
5.4
0%
Sep 26OpenClaw before 2026.8.1 CSV Formula Injection via Attendance Export
CVE-2026-100563
OP
OpenClaw
OpenClaw
5.4
0%
Sep 26OpenClaw before 2026.8.1 CSV Formula Injection via Session Labels
CVE-2026-100562
OP
OpenClaw
OpenClaw
5.4
0%
Sep 26OpenClaw before 2026.8.1 Authorization Bypass via sessions.create
CVE-2026-100561
OP
OpenClaw
OpenClaw
8.0
0%
Sep 26OpenClaw before 2026.8.1 Authentication Bypass via Exec Wrapper
CVE-2026-100560
OP
OpenClaw
OpenClaw
7.5
1%
Sep 26OpenClaw before 2026.8.1 Reusable Exec Approvals Authorization Bypass
CVE-2026-100559
OP
OpenClaw
OpenClaw
8.0
0%
Sep 26OpenClaw before 2026.8.1 Command Injection via Escaped Newlines
CVE-2026-100558
OP
OpenClaw
OpenClaw
7.5
0%
Sep 26OpenClaw before 2026.8.1 Resource Exhaustion via WebSocket Upgrade
CVE-2026-100557
OP
OpenClaw
OpenClaw
8.3
0%
Sep 26OpenClaw before 2026.8.1 Authorization Bypass via Skill Tool Dispatch
CVE-2026-100556
OP
OpenClaw
OpenClaw
6.3
0%
Sep 26OpenClaw before 2026.8.1 Authentication Bypass via Session Reset
CVE-2026-100555
OP
OpenClaw
OpenClaw
7.1
0%
Sep 26OpenClaw before 2026.8.1 DNS Rebinding via attachment delivery
CVE-2026-100554
OP
OpenClaw
OpenClaw
4.2
0%
Sep 26OpenClaw before 2026.8.1 Canvas Capability Revocation Bypass
CVE-2026-100553
OP
OpenClaw
OpenClaw
4.3
0%
Sep 26OpenClaw 2026.6.9 before 2026.8.1 Cross-Context Policy Bypass via Feishu unpin