Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-100592 | medium | 6.3 | No | OpenClaw is an agent gateway distributed via npm. In versions >= 2026.4.10 and < 2026.7.1, persistent memory dreaming mutations omit owner p... | 2026-10-05 |
| CVE-2026-100588 | high | 8.3 | No | OpenClaw (npm package 'openclaw') before 2026.7.1 does not enforce the administrator scope requirement on browser control when it is reached... | 2026-10-05 |
| CVE-2026-100584 | medium | 6.7 | No | OpenClaw is an npm-distributed agent runtime. In versions >= 2026.2.26 and < 2026.7.1, PowerShell command analysis on Windows hosts running... | 2026-10-05 |
| CVE-2026-100580 | high | 8.8 | No | OpenClaw (npm package 'openclaw') before 2026.7.1 improperly handles case sensitivity in the model-facing cron tool: a mixed-case payload ki... | 2026-10-05 |
| CVE-2026-100576 | medium | 5.4 | No | OpenClaw versions before 2026.8.1 contain a server-side request forgery vulnerability in browser wait predicates that allows attackers to by... | 2026-10-05 |
| CVE-2026-100572 | medium | 5.3 | No | OpenClaw versions >= 2026.3.25 and < 2026.8.1 apply invalid-token rate limiting for Synology Chat webhooks before authentication and key the... | 2026-10-05 |
| CVE-2026-100568 | high | 8.3 | No | OpenClaw versions before 2026.8.1 fail to properly restrict access to operator command cron jobs, allowing model-visible agent callers to re... | 2026-10-05 |
| CVE-2026-100563 | medium | 5.4 | No | OpenClaw (npm package `openclaw`) before 2026.8.1 does not neutralize leading characters that spreadsheet applications interpret as formulas... | 2026-10-05 |
| CVE-2026-100559 | high | 8.0 | No | OpenClaw versions before 2026.8.1 contain a command parser vulnerability where escaped newlines confuse exec allowlist parsing, allowing hid... | 2026-10-05 |
| CVE-2026-100555 | high | 7.1 | No | OpenClaw is an npm-distributed gateway application. In versions >= 2026.7.1 and < 2026.8.1, Synology Chat attachment delivery could lose DNS... | 2026-10-05 |
| CVE-2026-100551 | high | 8.3 | No | OpenClaw for iOS versions >= 2026.7.1 and < 2026.8.11 do not enforce saved Gateway TLS pins in the Control UI. While native connections enfo... | 2026-10-05 |
| CVE-2026-100547 | medium | 5.5 | No | OpenClaw is a coding agent distributed as the npm package `openclaw`. In affected versions (2026.7.1 through 2026.7.2), alternate but valid... | 2026-10-05 |
| CVE-2026-100543 | high | 7.5 | No | OpenClaw (npm package openclaw) before 2026.8.1 could include deterministic hashes computed over the original, unredacted configuration in r... | 2026-10-05 |
| CVE-2026-100539 | low | 2.6 | No | OpenClaw (npm package 'openclaw') before 2026.8.1 fails to revoke memory tool access when an operator hot-disables memory configuration. Exi... | 2026-10-05 |
| CVE-2026-100535 | high | 7.5 | No | OpenClaw (npm package 'openclaw') versions >= 2026.4.5 and < 2026.8.1 can lose the originating requester's restrictions and untrusted proven... | 2026-10-05 |
| CVE-2026-100527 | medium | 5.3 | No | OpenClaw before 2026.8.2 contains a denial of service vulnerability in the Browser extension relay that allows unauthenticated network sourc... | 2026-10-05 |
| CVE-2026-100523 | medium | 6.1 | No | Cotonti through 1.0.0 contains an open redirect vulnerability in message.php that base64-decodes the redirect parameter without domain valid... | 2026-10-05 |
| CVE-2026-100501 | medium | 6.5 | No | Flame through 2.4.0 contains an improper restriction of excessive authentication attempts vulnerability in the POST /api/auth login endpoint... | 2026-10-05 |
| CVE-2026-100391 | high | 8.2 | No | MediaFlow Proxy through 2.4.9 contains a server-side request forgery vulnerability in the /proxy routes due to missing and incomplete destin... | 2026-10-05 |
| CVE-2026-100780 | high | 8.8 | No | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Th... | 2026-10-05 |