Latest high and critical flaws
- CVE-2026-101884 OpenClaw Windows Node before 2026.7.1 contains an incomplete environment-variable sanitizer in system.run that fails to block GIT_CONFIG_*, DOTNET_STARTUP_HOOKSHigh 7.7 · Sep 30, 2026
- CVE-2026-101882 OpenClaw Windows Node before 2026.7.1 contains an incomplete validation vulnerability in system.execApprovals.set that accepts wildcard-executable rules and abuHigh 8.7 · Sep 30, 2026
- CVE-2026-101881 OpenClaw Windows Node before 2026.7.1 contains an allocation of resources without limits vulnerability in the gateway WebSocket transport that allows connected High 7.1 · Sep 30, 2026
- CVE-2026-101880 OpenClaw Windows Node before 2026.7.1 contains an incorrect authorization vulnerability in the system.run exec-approval policy where ExecShellWrapperParser failHigh 8.7 · Sep 30, 2026
- CVE-2026-101879 OpenClaw Windows Node before 2026.7.1-3 contains a missing authorization vulnerability in NodeService capture handlers that allows connected gateways or agents High 7.1 · Sep 30, 2026
- CVE-2026-100603 ClawHub (openclaw/clawhub) application/backend contains a flaw in the skill report moderation flow: four distinct ordinary authenticated accounts can report a vHigh 8.7 · Sep 26, 2026
- CVE-2026-100602 ClawHub (openclaw/clawhub application/backend) contains a missing authorization check in the changelog preview feature.High 7.1 · Sep 26, 2026
- CVE-2026-100599 OpenClaw versions 2026.5.1 through 2026.7.0 fail to apply the configured exec approval path to Google Meet node commands.High 8.7 · Sep 25, 2026
- CVE-2026-100598 OpenClaw (npm package openclaw) before 2026.7.1 incorrectly binds Signal approval reactions.High 7.5 · Sep 25, 2026
- CVE-2026-100597 OpenClaw (npm package 'openclaw') before 2026.7.1 is vulnerable to a time-of-check time-of-use race condition in OpenShell local mirror filesystem mutation operHigh 8.8 · Sep 25, 2026
- CVE-2026-100596 OpenClaw versions before 2026.7.1 fail to properly authorize non-owner users executing MCP configuration changes through /mcp set and /mcp unset commands.High 8.7 · Sep 25, 2026
- CVE-2026-100595 OpenClaw versions before 2026.7.1 contain an authorization bypass vulnerability in the diagnostics export command that allows non-owner channel senders to accesHigh 7.1 · Sep 25, 2026
- CVE-2026-100594 OpenClaw versions before 2026.7.1 contain an authorization bypass vulnerability in the /export-trajectory endpoint that allows non-owner senders to request and High 7.1 · Sep 25, 2026
- CVE-2026-100589 OpenClaw versions before 2026.7.1 contain a sandbox bypass vulnerability in the browser tool that allows sandboxed sessions to access paired node browser actionHigh 8.7 · Sep 25, 2026
- CVE-2026-100588 OpenClaw (npm package 'openclaw') before 2026.7.1 does not enforce the administrator scope requirement on browser control when it is reached through the node.inHigh 8.7 · Sep 25, 2026
- CVE-2026-100587 OpenClaw versions before 2026.7.1 fail to properly validate owner authorization in the Codex computer-use installation command.High 8.7 · Sep 25, 2026
- CVE-2026-100586 OpenClaw Codex before 2026.7.1 fails to properly enforce owner authorization when creating native conversation bindings.High 8.7 · Sep 25, 2026
- CVE-2026-100585 OpenClaw (npm package `openclaw`) before 2026.7.1 fails to enforce the owner-only authorization requirement for Claude Code permission prompts delivered throughHigh 8.6 · Sep 25, 2026
- CVE-2026-100582 OpenClaw channel plugins (@openclaw/msteams, @openclaw/feishu, @openclaw/matrix, and @openclaw/googlechat) before 2026.8.1 do not enforce the configured channelHigh 7.1 · Sep 25, 2026
- CVE-2026-100580 OpenClaw (npm package 'openclaw') before 2026.7.1 improperly handles case sensitivity in the model-facing cron tool: a mixed-case payload kind can pass the agenHigh 8.7 · Sep 25, 2026
- CVE-2026-100579 OpenClaw (npm package 'openclaw') before 2026.7.1 incorrectly trusts requester provenance in message.action.High 7.2 · Sep 25, 2026
- CVE-2026-100578 OpenClaw (npm package `openclaw`) before 2026.7.1 fails to restrict owner-only infrastructure tools exposed through the chat.send endpoint.High 7.2 · Sep 25, 2026
- CVE-2026-100575 OpenClaw Slack versions before 2026.8.1 fail to properly enforce sender allowlists in multi-person direct messages.High 8.7 · Sep 25, 2026
- CVE-2026-100574 OpenClaw (npm package 'openclaw') before 2026.8.1 contains a server-side request forgery vulnerability in its trusted-host DNS checks.High 8.2 · Sep 25, 2026
- CVE-2026-100570 OpenClaw (npm package 'openclaw') versions >= 2026.3.28 and < 2026.8.1 allow an untrusted workspace .env file to set the CLOUDSDK_PYTHON_ARGS environment variabHigh 8.5 · Sep 25, 2026
Part of our vulnerability database: the whole National Vulnerability Database plus CISA’s exploited list, refreshed twice a day. This is general guidance, not a review of your systems.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.