每日自动更新

🛡️ UCloud OpenClaw CVEs

安全漏洞追踪面板 — 基于 cvelistV5 + GitHub Advisory Database 数据

17
已发布 CVE
141
安全公告
34
HIGH / CRITICAL
17/17
Pipeline 全部已发布
📋 CVE 列表 🔄 发布流水线 📢 安全公告 📊 漏洞分类 💡 关键洞察

📋 已发布 CVE（cvelistV5）

16
CVE ID严重性CVSS漏洞描述发布日期
CVE-2026-25253 🔴 HIGH 8.8 OpenClaw/Clawdbot has 1-Click RCE via Authentication Token Exfiltration From gatewayUrl 2026-02-01
CVE-2026-24763 🔴 HIGH 8.8 OpenClaw/Clawdbot Docker Execution has Authenticated Command Injection via PATH Environment Variable 2026-02-02
CVE-2026-28478 🔴 HIGH 8.7 OpenClaw affected by denial of service via unbounded webhook request body buffering 2026-03-05
CVE-2026-41295 🔴 HIGH 8.5 OpenClaw: Untrusted workspace channel shadows could execute during built-in channel setup 2026-04-20
CVE-2026-28469 🔴 HIGH 8.2 OpenClaw Google Chat shared-path webhook target ambiguity allowed cross-account policy-context misrouting 2026-03-05
CVE-2026-25157 🔴 HIGH 7.8 OpenClaw/Clawdbot has OS Command Injection via Project Root Path in sshNodeCommand 2026-02-04
CVE-2026-28458 🔴 HIGH 7.4 OpenClaw's Browser Relay /cdp websocket is missing auth which could allow cross-tab cookie access 2026-03-05
CVE-2026-40037 🔴 HIGH 7.1 OpenClaw: `fetchWithSsrFGuard` replays unsafe request bodies across cross-origin redirects 2026-04-08
CVE-2026-26317 🔴 HIGH 7.1 OpenClaw affected by cross-site request forgery (CSRF) through loopback browser mutation endpoints 2026-02-19
CVE-2026-28480 🟡 MEDIUM 6.9 OpenClaw Telegram allowlist authorization accepted mutable usernames 2026-03-05
CVE-2026-41301 🟡 MEDIUM 6.9 OpenClaw: Forged Nostr DMs could create pairing state before signature verification 2026-04-20
CVE-2026-29612 🟡 MEDIUM 6.8 OpenClaw < 2026.2.14 - Denial of Service via Large Base64 Media File Decoding 2026-03-05
CVE-2026-28452 🟡 MEDIUM 6.7 OpenClaw affected by denial of service through unguarded archive extraction allowing high expansion/resource abuse (ZIP/TAR) 2026-03-05
CVE-2026-26328 🟡 MEDIUM 6.5 OpenClaw iMessage group allowlist authorization inherited DM pairing-store identities 2026-02-19
CVE-2026-40045 🟡 MEDIUM 5.9 OpenClaw: Android accepted cleartext remote gateway endpoints and sent stored credentials over ws:// 2026-04-20
CVE-2026-41298 🟡 MEDIUM 5.3 OpenClaw < 2026.4.2 - Authorization Bypass in Session Termination Endpoint 2026-04-20

🔄 CVE 发布流水线

17/17 已发布
CVE ID状态CNAGHSA 发布日期cvelistV5
CVE-2026-24763 ✅ PUBLISHED GitHub_M 2026-02-02 ✅ 已收录
CVE-2026-25157 ✅ PUBLISHED GitHub_M 2026-02-02 ✅ 已收录
CVE-2026-25253 ✅ PUBLISHED mitre 2026-02-02 ✅ 已收录
CVE-2026-26317 ✅ PUBLISHED GitHub_M 2026-02-18 ✅ 已收录
CVE-2026-26328 ✅ PUBLISHED GitHub_M 2026-02-18 ✅ 已收录
CVE-2026-28452 ✅ PUBLISHED VulnCheck 2026-02-18 ✅ 已收录
CVE-2026-28458 ✅ PUBLISHED VulnCheck 2026-02-17 ✅ 已收录
CVE-2026-28469 ✅ PUBLISHED VulnCheck 2026-02-18 ✅ 已收录
CVE-2026-28478 ✅ PUBLISHED VulnCheck 2026-02-18 ✅ 已收录
CVE-2026-28480 ✅ PUBLISHED VulnCheck 2026-02-18 ✅ 已收录
CVE-2026-29612 ✅ PUBLISHED VulnCheck 2026-02-18 ✅ 已收录
CVE-2026-40037 ✅ PUBLISHED VulnCheck 2026-04-09 ✅ 已收录
CVE-2026-40045 ✅ PUBLISHED VulnCheck 2026-04-07 ✅ 已收录
CVE-2026-41295 ✅ PUBLISHED VulnCheck 2026-04-07 ✅ 已收录
CVE-2026-41298 ✅ PUBLISHED VulnCheck 2026-04-07 ✅ 已收录
CVE-2026-41301 ✅ PUBLISHED VulnCheck 2026-04-07 ✅ 已收录
CVE-2026-6011 ✅ PUBLISHED — 2026-04-10 ✅ 已收录
CVE-2026-40037 ✅ PUBLISHED | [GHSA-5wj5-87vq-39xm](https://github.com/advisories/GHSA-5wj5-87vq-39xm) 2026-04-09 ✅ 已收录
CVE-2026-28469 ✅ PUBLISHED | [GHSA-3fqr-4cg8-h96q](https://github.com/advisories/GHSA-3fqr-4cg8-h96q) 2026-02-18 ✅ 已收录
CVE-2026-28478 ✅ PUBLISHED | [GHSA-mr32-vwc2-5j6h](https://github.com/advisories/GHSA-mr32-vwc2-5j6h) 2026-02-18 ✅ 已收录
CVE-2026-25157 ✅ PUBLISHED | [GHSA-g8p2-7wf7-98mq](https://github.com/advisories/GHSA-g8p2-7wf7-98mq) 2026-02-02 ✅ 已收录
CVE-2026-24763 ✅ PUBLISHED | [GHSA-r2c6-8jc8-g32w](https://github.com/advisories/GHSA-r2c6-8jc8-g32w) 2026-02-02 ✅ 已收录
CVE-2026-40045 ✅ PUBLISHED | [GHSA-2qrv-rc5x-2g2h](https://github.com/advisories/GHSA-2qrv-rc5x-2g2h) 2026-04-07 ✅ 已收录
CVE-2026-41298 ✅ PUBLISHED | [GHSA-h43v-27wg-5mf9](https://github.com/advisories/GHSA-h43v-27wg-5mf9) 2026-04-07 ✅ 已收录
CVE-2026-28480 ✅ PUBLISHED | [GHSA-h89v-j3x9-8wqj](https://github.com/advisories/GHSA-h89v-j3x9-8wqj) 2026-02-18 ✅ 已收录
CVE-2026-29612 ✅ PUBLISHED | [GHSA-g34w-4xqq-h79m](https://github.com/advisories/GHSA-g34w-4xqq-h79m) 2026-02-18 ✅ 已收录
CVE-2026-6011 ✅ PUBLISHED | [GHSA-5f7h-p83x-5vc2](https://github.com/advisories/GHSA-5f7h-p83x-5vc2) 2026-04-10 ✅ 已收录

📢 安全公告精选

141+
GHSA-xh72-v6v CRITICAL
OpenClaw: Feishu webhook and card-action validation now fail closed
2026-04-17
GHSA-mr34-955 HIGH
OpenClaw: Webchat media embedding enforces local-root containment for tool-result files
2026-04-17
GHSA-2gvc-4f3 HIGH
OpenClaw: Matrix room control-command authorization no longer trusts DM pairing-store entries
2026-04-17
GHSA-xmxx-7p2 HIGH
OpenClaw: Gateway HTTP endpoints re-resolve bearer auth after SecretRef rotation
2026-04-17
GHSA-66r7-m7x HIGH
OpenClaw: QQBot media tags could read arbitrary local files through reply text
2026-04-17
GHSA-2cq5-mf3 HIGH
OpenClaw: busybox and toybox applet execution weakened exec approval binding
2026-04-17
GHSA-7jp6-r74 HIGH
OpenClaw: Matrix profile config persistence was reachable from operator.write message tools
2026-04-17
GHSA-736r-jwj HIGH
OpenClaw: Sandboxed agents could escape exec routing via host=node override
2026-04-17
GHSA-939r-rj4 HIGH
OpenClaw: Workspace provider auth choices could auto-enable untrusted provider plugins
2026-04-17
GHSA-525j-hqq HIGH
OpenClaw: Sandbox browser CDP relay could expose DevTools protocol on 0.0.0.0
2026-04-17
GHSA-82qx-6vj HIGH
OpenClaw: Channel setup catalog lookups could include untrusted workspace plugin shadows
2026-04-17
GHSA-vfp4-8x5 HIGH
OpenClaw: Exec environment denylist missed high-risk interpreter startup variables
2026-04-17

📊 漏洞分类

白名单绕过 (Allowlist Bypass)
60
注入攻击 (XSS/CSRF/Prompt/Command)
34
认证绕过 / 缺失认证
10
SSRF
5
拒绝服务 (DoS)
6
路径穿越 (CWE-22)
3
原型污染 (Prototype Pollution)
1

💡 关键洞察

📈
7.3
平均 CVSS 评分
🔴
200%
HIGH 及以上漏洞占比
⚡
100%
CVE 已发布到 cvelistV5
🛡️
100%
已提供修复版本
🏢
3
CNA 来源 (VulnCheck / GitHub / MITRE)
📦
npm
受影响包 (openclaw)