Vulnerabilidades de Openclaw
CVEs publicadas que afetam produtos de Openclaw: 679 registro(s), com severidade, exploração e correções.
Openclaw 645OpenClaw Windows Node 6Crabbox 5Clawhub 5Openclaw/feishu 4Msteams 4ClawScan 3Openclaw/voice-call 3Discord 2Clawdbot 2Slack 2Matrix 2Line 1Whatsapp 1@openclaw/bluebubbles 1Googlechat 1Diagnostics-prometheus 1Nextcloud-talk 1OpenClaw iOS 1
CVE-2026-25475
Média · 6.5
CWE-22 04/02/2026
OpenClaw Vulnerable to Local File Inclusion via MEDIA: Path Extraction
OpenClaw is a personal AI assistant. Prior to version 2026.1.30, the isValidMedia() function in src/media/parse.ts allows arbitrary file paths including absolute paths, home directory paths, and directory traversal sequences. An agent can read any file on the system by outputting MEDIA:/path/to/file, exfiltrating sensitive data to the user/channel. This issue has been patched in version 2026.1.30.
CVE-2026-25157
Alta · 7.5
CWE-78 04/02/2026
OpenClaw/Clawdbot has OS Command Injection via Project Root Path in sshNodeCommand
OpenClaw is a personal AI assistant. Prior to version 2026.1.29, there is an OS command injection vulnerability via the Project Root Path in sshNodeCommand. The sshNodeCommand function constructed a shell script without properly escaping the user-supplied project path in an error message. When the cd command failed, the unescaped path was interpolated directly into an echo statement, allowing arbitrary command execution on the remote SSH host. The parseSSHTarget function did not validate that SSH target strings could not begin with a dash. An attacker-supplied target like -oProxyCommand=... would be interpreted as an SSH configuration flag rather than a hostname, allowing arbitrary command execution on the local machine. This issue has been patched in version 2026.1.29.
CVE-2026-24763
Alta · 8.8
CWE-78 02/02/2026
Authenticated Command Injection in OpenClaw Docker Execution via PATH Environment Variable
OpenClaw (formerly Clawdbot) is a personal AI assistant you run on your own devices. Prior to 2026.1.29, a command injection vulnerability existed in OpenClaw’s Docker sandbox execution mechanism due to unsafe handling of the PATH environment variable when constructing shell commands. An authenticated user able to control environment variables could influence command execution within the container context. This vulnerability is fixed in 2026.1.29.
CVE-2026-25253
Alta · 8.8
CWE-669 01/02/2026
Incorrect Resource Transfer Between Spheres em Openclaw
OpenClaw (aka clawdbot or Moltbot) before 2026.1.29 obtains a gatewayUrl value from a query string and automatically makes a WebSocket connection without prompting, sending a token value.