每日自动更新

🛡️ UCloud OpenClaw CVEs

安全漏洞追踪面板 — 基于 cvelistV5 + GitHub Advisory Database 数据

48
已发布 CVE
186
安全公告
49
HIGH / CRITICAL
48/48
Pipeline 全部已发布
📋 CVE 列表 🔄 发布流水线 📢 安全公告 📊 漏洞分类 💡 关键洞察

📋 已发布 CVE（cvelistV5）

138
CVE ID严重性CVSS漏洞描述发布日期
CVE-2026-28466 🟣 CRITICAL 9.4 OpenClaw < 2026.2.14 - Remote Code Execution via Node Invoke Approval Bypass 2026-03-05
CVE-2026-43534 🟣 CRITICAL 9.3 OpenClaw < 2026.4.10 - Unsanitized External Input in Agent Hook Events 2026-05-05
CVE-2026-32918 🟣 CRITICAL 9.2 OpenClaw < 2026.3.11 - Session Sandbox Escape via session_status Tool 2026-03-29
CVE-2026-32917 🟣 CRITICAL 9.2 OpenClaw < 2026.3.13 - Remote Command Injection via Unsanitized iMessage Attachment Paths in SCP 2026-03-31
CVE-2026-43585 🟣 CRITICAL 9.2 OpenClaw: Gateway HTTP endpoints re-resolve bearer auth after SecretRef rotation 2026-05-06
CVE-2026-44109 🟣 CRITICAL 9.2 OpenClaw: Feishu webhook and card-action validation now fail closed 2026-05-06
CVE-2026-41386 🟣 CRITICAL 9.1 OpenClaw < 2026.3.22 - Privilege Escalation via Unbound Bootstrap Setup Codes 2026-04-28
CVE-2026-43533 🔴 HIGH 8.9 OpenClaw < 2026.4.10 - Arbitrary Local File Read via QQBot Media Tags 2026-05-05
CVE-2026-25253 🔴 HIGH 8.8 OpenClaw/Clawdbot has 1-Click RCE via Authentication Token Exfiltration From gatewayUrl 2026-02-01
CVE-2026-24763 🔴 HIGH 8.8 OpenClaw/Clawdbot Docker Execution has Authenticated Command Injection via PATH Environment Variable 2026-02-02
CVE-2026-32913 🔴 HIGH 8.8 OpenClaw < 2026.3.7 - Custom Authorization Header Leakage via Cross-Origin Redirects 2026-03-23
CVE-2026-41296 🔴 HIGH 8.8 OpenClaw < 2026.3.31 - Sandbox Escape via TOCTOU Race in Remote FS Bridge readFile 2026-04-20
CVE-2026-28478 🔴 HIGH 8.7 OpenClaw affected by denial of service via unbounded webhook request body buffering 2026-03-05
CVE-2026-32042 🔴 HIGH 8.7 OpenClaw < 2026.2.25 - Privilege Escalation via Unpaired Device Identity in Shared Gateway Authentication 2026-03-21
CVE-2026-32051 🔴 HIGH 8.7 OpenClaw < 2026.3.1 - Authorization Bypass in Agent Runs via Owner-Only Tool Access 2026-03-21
CVE-2026-33573 🔴 HIGH 8.7 OpenClaw < 2026.3.11 - Workspace Boundary Bypass via Agent RPC Parameters 2026-03-29
CVE-2026-41405 🔴 HIGH 8.7 OpenClaw < 2026.3.31 - Resource Exhaustion via Unauthenticated MS Teams Webhook Body Parsing 2026-04-28
CVE-2026-42434 🔴 HIGH 8.7 OpenClaw: Sandboxed agents could escape exec routing via host=node override 2026-05-05
CVE-2026-43530 🔴 HIGH 8.7 OpenClaw: busybox and toybox applet execution weakened exec approval binding 2026-05-05
CVE-2026-44115 🔴 HIGH 8.7 OpenClaw < 2026.4.22 - Shell Expansion Bypass in Unquoted Heredocs via Exec Allowlist 2026-05-06
CVE-2026-53814 🔴 HIGH 8.7 OpenClaw < 2026.5.20 - Privilege Escalation via Hook-Triggered CLI MCP Tool Authority 2026-06-11
CVE-2026-32920 🔴 HIGH 8.6 OpenClaw < 2026.3.12 - Arbitrary Code Execution via Auto-Discovery of Workspace Plugins 2026-03-31
CVE-2026-33579 🔴 HIGH 8.6 OpenClaw < 2026.3.28 - Privilege Escalation via Missing Caller Scope Validation in Device Pair Approval 2026-03-31
CVE-2026-53823 🔴 HIGH 8.6 OpenClaw < 2026.5.3 - Privilege Escalation via Mutable Slack Display Names in allowFrom 2026-06-12
CVE-2026-44118 🔴 HIGH 8.5 OpenClaw < 2026.4.22 - Owner Context Spoofing via Bearer Token Header 2026-05-06
CVE-2026-44114 🔴 HIGH 8.5 OpenClaw: Workspace dotenv could override runtime-control environment variables 2026-05-06
CVE-2026-45004 🔴 HIGH 8.4 OpenClaw vulnerable to arbitrary code execution via attacker-controlled setup-api.js loaded from cwd during env-key resolution 2026-05-11
CVE-2026-31998 🔴 HIGH 8.3 OpenClaw 2026.2.22 < 2026.2.24 - Authorization Bypass in Synology Chat Plugin via Empty allowedUserIds 2026-03-19
CVE-2026-35618 🔴 HIGH 8.3 OpenClaw < 2026.3.23 - Replay Identity Drift via Query-Only Variants in Plivo V2 Verification 2026-04-09
CVE-2026-43526 🔴 HIGH 8.3 OpenClaw: QQBot reply media URL handling could trigger SSRF and re-upload fetched bytes 2026-05-05
CVE-2026-28469 🔴 HIGH 8.2 OpenClaw Google Chat shared-path webhook target ambiguity allowed cross-account policy-context misrouting 2026-03-05
CVE-2026-29611 🔴 HIGH 8.2 OpenClaw < 2026.2.14 - Local File Inclusion via mediaPath Parameter in BlueBubbles Media Handling 2026-03-05
CVE-2026-25157 🔴 HIGH 7.8 OpenClaw/Clawdbot has OS Command Injection via Project Root Path in sshNodeCommand 2026-02-04
CVE-2026-27002 🔴 HIGH 7.7 OpenClaw: Docker container escape via unvalidated bind mount config injection 2026-02-19
CVE-2026-32048 🔴 HIGH 7.7 OpenClaw < 2026.3.1 - Sandbox Escape via Cross-Agent sessions_spawn 2026-03-21
CVE-2026-43569 🔴 HIGH 7.7 OpenClaw: Workspace provider auth choices could auto-enable untrusted provider plugins 2026-05-05
CVE-2026-43571 🔴 HIGH 7.7 OpenClaw: Channel setup catalog lookups could include untrusted workspace plugin shadows 2026-05-05
CVE-2026-44110 🔴 HIGH 7.7 OpenClaw: Matrix room control-command authorization no longer trusts DM pairing-store entries 2026-05-06
CVE-2026-53807 🔴 HIGH 7.7 OpenClaw < 2026.5.6 - Authorization Bypass in Telegram Interactive Callbacks via commands.allowFrom 2026-06-11
CVE-2026-41353 🔴 HIGH 7.6 OpenClaw < 2026.3.22 - allowProfiles Bypass via Profile Mutation and Runtime Selection 2026-04-23
CVE-2026-43535 🔴 HIGH 7.6 OpenClaw < 2026.4.14 - Authorization Context Reuse in Collect-Mode Queue Batches 2026-05-05
CVE-2026-26316 🔴 HIGH 7.5 OpenClaw has BlueBubbles webhook auth bypass via loopback proxy trust 2026-02-19
CVE-2026-26324 🔴 HIGH 7.5 OpenClaw has a SSRF guard bypass via full-form IPv4-mapped IPv6 (loopback / metadata reachable) 2026-02-19
CVE-2026-22179 🔴 HIGH 7.5 OpenClaw < 2026.2.22 - Allowlist Bypass via Command Substitution in system.run 2026-03-18
CVE-2026-32025 🔴 HIGH 7.5 OpenClaw < 2026.2.25 - Password Brute-Force via Browser-Origin WebSocket Authentication Bypass 2026-03-19
CVE-2026-28458 🔴 HIGH 7.4 OpenClaw's Browser Relay /cdp websocket is missing auth which could allow cross-tab cookie access 2026-03-05
CVE-2026-34512 🔴 HIGH 7.2 OpenClaw < 2026.3.25 - Improper Access Control in /sessions/:sessionKey/kill Endpoint 2026-04-09
CVE-2026-26317 🔴 HIGH 7.1 OpenClaw affected by cross-site request forgery (CSRF) through loopback browser mutation endpoints 2026-02-19
CVE-2026-26327 🔴 HIGH 7.1 OpenClaw allows unauthenticated discovery TXT records to steer routing and TLS pinning 2026-02-19
CVE-2026-32008 🔴 HIGH 7.1 OpenClaw < 2026.2.21 - Arbitrary Local File Read via Browser Navigation Guard 2026-03-19
CVE-2026-32976 🔴 HIGH 7.1 OpenClaw < 2026.3.11 - Account-Scoped configWrites Policy Bypass via Channel Commands 2026-03-31
CVE-2026-35644 🔴 HIGH 7.1 OpenClaw < 2026.3.22 - Credential Exposure via baseUrl Fields in Gateway Snapshots 2026-04-09
CVE-2026-35636 🔴 HIGH 7.1 OpenClaw 2026.3.11 < 2026.3.25 - Session Isolation Bypass via sessionId Resolution 2026-04-09
CVE-2026-41368 🔴 HIGH 7.1 OpenClaw < 2026.3.28 - Environment Variable Disclosure via jq $ENV Filter Bypass 2026-04-27
CVE-2026-41385 🔴 HIGH 7.1 OpenClaw < 2026.3.31 - Nostr Private Key Exposure via config.get Redaction Bypass 2026-04-28
CVE-2026-42433 🔴 HIGH 7.1 OpenClaw: Matrix profile config persistence was reachable from operator.write message tools 2026-05-05
CVE-2026-43567 🔴 HIGH 7.1 OpenClaw < 2026.4.10 - Path Traversal in screen_record outPath Parameter 2026-05-05
CVE-2026-43568 🔴 HIGH 7.1 OpenClaw 2026.4.5 < 2026.4.10 - Privilege Escalation via Memory Dreaming Configuration in /dreaming Endpoint 2026-05-05
CVE-2026-41380 🔴 HIGH 7 OpenClaw < 2026.3.28 - Arbitrary Execution Allowlist via Wrapper Carrier Executables 2026-04-28
CVE-2026-43531 🔴 HIGH 7 OpenClaw < 2026.4.9 - Environment Variable Injection via Workspace .env File 2026-05-05
CVE-2026-22178 🟡 MEDIUM 6.9 OpenClaw < 2026.2.19 - ReDoS and Regex Injection via Unescaped Feishu Mention Metadata 2026-03-18
CVE-2026-28480 🟡 MEDIUM 6.9 OpenClaw Telegram allowlist authorization accepted mutable usernames 2026-03-05
CVE-2026-32975 🟡 MEDIUM 6.9 OpenClaw < 2026.3.12 - Weak Authorization via Mutable Group Names in Zalouser Allowlist 2026-03-29
CVE-2026-35626 🟡 MEDIUM 6.9 OpenClaw < 2026.3.22 - Unauthenticated Resource Exhaustion via Voice Call Webhook 2026-04-09
CVE-2026-34426 🟡 MEDIUM 6.9 OpenClaw - Approval Bypass via Environment Variable Normalization 2026-04-02
CVE-2026-35647 🟡 MEDIUM 6.9 OpenClaw < 2026.3.25 - Direct Message Policy Bypass via Verification Notices 2026-04-10
CVE-2026-41300 🟡 MEDIUM 6.9 OpenClaw < 2026.3.31 - Attacker-Discovered Endpoint Preservation in Remote Onboarding 2026-04-20
CVE-2026-41331 🟡 MEDIUM 6.9 OpenClaw < 2026.3.31 - Resource Consumption via Unauthorized Telegram Audio Preflight Transcription 2026-04-20
CVE-2026-35664 🟡 MEDIUM 6.9 OpenClaw < 2026.3.25 - DM Pairing Bypass via Legacy Card Callbacks 2026-04-10
CVE-2026-41374 🟡 MEDIUM 6.9 OpenClaw < 2026.3.31 - Resource Consumption via Discord Audio Preflight Before Member Authorization 2026-04-28
CVE-2026-41400 🟡 MEDIUM 6.9 OpenClaw < 2026.3.31 - Resource Consumption via Oversized WebSocket Frames in voice-call 2026-04-28
CVE-2026-44116 🟡 MEDIUM 6.9 OpenClaw < 2026.4.22 - Server-Side Request Forgery in Zalo Photo URL Validation 2026-05-06
CVE-2026-53818 🟡 MEDIUM 6.9 OpenClaw < 2026.4.24 - Owner-Only Tool Policy Bypass via MCP Loopback 2026-06-11
CVE-2026-29612 🟡 MEDIUM 6.8 OpenClaw < 2026.2.14 - Denial of Service via Large Base64 Media File Decoding 2026-03-05
CVE-2026-26972 🟡 MEDIUM 6.7 OpenClaw has a Path Traversal in Browser Download Functionality 2026-02-19
CVE-2026-28452 🟡 MEDIUM 6.7 OpenClaw affected by denial of service through unguarded archive extraction allowing high expansion/resource abuse (ZIP/TAR) 2026-03-05
CVE-2026-26328 🟡 MEDIUM 6.5 OpenClaw iMessage group allowlist authorization inherited DM pairing-store identities 2026-02-19
CVE-2026-28449 🟡 MEDIUM 6.3 OpenClaw < 2026.2.25 - Webhook Replay Attack via Missing Durable Replay Suppression 2026-03-19
CVE-2026-35628 🟡 MEDIUM 6.3 OpenClaw < 2026.3.25 - Brute-Force Attack via Missing Telegram Webhook Rate Limiting 2026-04-09
CVE-2026-35646 🟡 MEDIUM 6.3 OpenClaw < 2026.3.25 - Pre-Authentication Rate-Limit Bypass in Webhook Token Validation 2026-04-09
CVE-2026-35649 🟡 MEDIUM 6.3 OpenClaw < 2026.3.22 - Settings Reconciliation Bypass via Empty Allowlist 2026-04-10
CVE-2026-35635 🟡 MEDIUM 6.3 OpenClaw < 2026.3.22 - Webhook Path Route Replacement Vulnerability in Synology Chat 2026-04-09
CVE-2026-41333 🟡 MEDIUM 6.3 OpenClaw < 2026.3.31 - Authentication Rate Limiting Bypass via Fake DeviceToken 2026-04-23
CVE-2026-41389 🟡 MEDIUM 6.3 OpenClaw: Webchat media embedding enforces local-root containment for tool-result files 2026-04-20
CVE-2026-41913 🟡 MEDIUM 6.3 OpenClaw < 2026.4.4 - Rate-Limit Bypass via Concurrent Async Authentication Attempts 2026-04-28
CVE-2026-43527 🟡 MEDIUM 6.3 OpenClaw: Browser SSRF policy default allowed private-network navigation 2026-05-05
CVE-2026-44117 🟡 MEDIUM 6.3 OpenClaw < 2026.4.20 - Server-Side Request Forgery in QQBot Direct Media Upload 2026-05-06
CVE-2026-44999 🟡 MEDIUM 6.3 OpenClaw < 2026.4.20 - Improper Trust Labeling in Isolated Cron Awareness Events 2026-05-11
CVE-2026-45002 🟡 MEDIUM 6.3 OpenClaw < 2026.4.20 - Hook Session-Key Bypass via Template Mapping 2026-05-11
CVE-2026-35645 🟡 MEDIUM 6.1 OpenClaw < 2026.3.25 - Privilege Escalation via Synthetic operator.admin in deleteSession 2026-04-09
CVE-2026-32039 🟡 MEDIUM 6 OpenClaw < 2026.2.22 - Sender Authorization Bypass via Identity Collision in toolsBySender 2026-03-19
CVE-2026-35622 🟡 MEDIUM 6 OpenClaw < 2026.3.22 - Improper Authentication Verification in Google Chat Webhook 2026-04-09
CVE-2026-42429 🟡 MEDIUM 6 OpenClaw < 2026.4.8 - Privilege Escalation via Gateway Plugin HTTP Authentication 2026-04-28
CVE-2026-43570 🟡 MEDIUM 6 OpenClaw contains a symlink traversal vulnerability 2026-05-05
CVE-2026-44112 🟡 MEDIUM 6 OpenClaw < 2026.4.22 - Symlink Swap Race Condition in OpenShell FS Bridge Writes 2026-05-06
CVE-2026-44113 🟡 MEDIUM 6 OpenClaw: OpenShell FS bridge reads pin and verify the opened file before returning bytes 2026-05-06
CVE-2026-53830 🟡 MEDIUM 6 OpenClaw < 2026.4.22 - Webhook Secret Revocation Bypass via secrets.reload 2026-06-12
CVE-2026-53838 🟡 MEDIUM 6 OpenClaw < 2026.5.27 - Node Pairing State Mutation via Reconnection 2026-06-12
CVE-2026-28481 🟡 MEDIUM 5.9 OpenClaw < 2026.2.1 - Bearer Token Leakage via MS Teams Attachment Downloader Suffix Matching 2026-03-05
CVE-2026-32054 🟡 MEDIUM 5.9 OpenClaw < 2026.2.25 - Symlink Traversal in Browser Trace/Download Path Handling 2026-03-21
CVE-2026-45005 🟡 MEDIUM 5.9 OpenClaw < 2026.4.23 - Webhook Route Secret Cache Not Invalidated After Rotation 2026-05-11
CVE-2026-31999 🟡 MEDIUM 5.8 OpenClaw 2026.2.26 < 2026.3.1 - Current Working Directory Injection via Windows Wrapper Resolution Fallback 2026-03-19
CVE-2026-32000 🟡 MEDIUM 5.8 OpenClaw < 2026.2.19 - Command Injection via Windows Shell Fallback in Lobster Tool Execution 2026-03-19
CVE-2026-31995 🟡 MEDIUM 5.8 OpenClaw 2026.1.21 < 2026.2.19 - Command Injection via Windows Shell Fallback in Lobster Extension 2026-03-19
CVE-2026-32988 🟡 MEDIUM 5.8 OpenClaw < 2026.3.11 - Sandbox Boundary Bypass via Unvalidated Temporary File Creation 2026-03-31
CVE-2026-41332 🟡 MEDIUM 5.8 OpenClaw < 2026.3.28 - Code Execution via Missing Environment Variable Blocklist 2026-04-23
CVE-2026-41360 🟡 MEDIUM 5.4 OpenClaw < 2026.4.2 - Approval Integrity Bypass in pnpm dlx Local Script Binding 2026-04-23
CVE-2026-44995 🟡 MEDIUM 5.4 OpenClaw: MCP stdio server env could load dangerous startup variables from workspace config 2026-05-11
CVE-2026-26326 🟡 MEDIUM 5.3 OpenClaw skills.status could leak secrets to operator.read clients 2026-02-19
CVE-2026-32899 🟡 MEDIUM 5.3 OpenClaw < 2026.2.25 - Sender Policy Bypass in Slack Reaction and Pin Event Handlers 2026-03-21
CVE-2026-41909 🟡 MEDIUM 5.3 OpenClaw < 2026.4.20 - Improper Authorization in Paired-Device Pairing Actions 2026-04-23
CVE-2026-35634 🟡 MEDIUM 5.1 OpenClaw < 2026.3.23 - Authentication Bypass via Local-Direct Requests in Canvas Gateway 2026-04-09
CVE-2026-42436 🟡 MEDIUM 4.9 OpenClaw < 2026.4.14 - Internal Page Content Exposure via Browser Snapshot and Screenshot Routes 2026-05-05
CVE-2026-42439 🟡 MEDIUM 4.9 OpenClaw < 2026.4.10 - SSRF Policy Bypass in Browser Tabs Action Routes 2026-05-05
CVE-2026-43532 🟡 MEDIUM 4.9 OpenClaw 2026.4.7 < 2026.4.10 - Sandbox Media Normalization Bypass via Discord Event Cover Image 2026-05-05
CVE-2026-42438 🟡 MEDIUM 4.9 OpenClaw: Sender policy bypass in host media attachment reads allows unauthorized local file disclosure 2026-05-05
CVE-2026-43573 🟡 MEDIUM 4.9 OpenClaw: Existing-session browser interaction routes bypassed SSRF policy enforcement 2026-05-05
CVE-2026-43576 🟡 MEDIUM 4.9 OpenClaw < 2026.4.5 - Second-hop SSRF via CDP /json/version WebSocket URL 2026-05-06
CVE-2026-43580 🟡 MEDIUM 4.9 OpenClaw: Browser press/type interaction routes missed complete navigation guard coverage 2026-05-06
CVE-2026-43582 🟡 MEDIUM 4.9 OpenClaw < 2026.4.10 - DNS Rebinding SSRF via Hostname Validation Bypass 2026-05-06
CVE-2026-27007 🟡 MEDIUM 4.8 OpenClaw's sandbox config hash sorted primitive arrays and suppressed needed container recreation 2026-02-19
CVE-2026-44992 🟡 MEDIUM 4.1 OpenClaw 2026.4.5 < 2026.4.20 - MiniMax API Host Override via Workspace dotenv 2026-05-11
CVE-2026-45003 🟡 MEDIUM 4.1 OpenClaw: Workspace dotenv files cannot override connector endpoint hosts 2026-05-11
CVE-2026-32006 🟢 LOW 2.3 OpenClaw < 2026.2.26 - Authorization Bypass via DM Pairing-Store Fallback in Group Allowlist 2026-03-19
CVE-2026-34507 🟢 LOW 2.3 OpenClaw < 2026.4.29 - Policy Bypass in QQBot Admin Commands via DM-only and allowFrom Checks 2026-05-29
CVE-2026-35617 🟢 LOW 2.3 OpenClaw < 2026.3.25 - Authorization Bypass via Group Policy Rebinding with Mutable Space displayName 2026-04-09
CVE-2026-35648 🟢 LOW 2.3 OpenClaw < 2026.3.22 - Policy Bypass via Unvalidated Queued Node Actions 2026-04-10
CVE-2026-41347 🟢 LOW 2.3 OpenClaw < 2026.3.31 - Cross-Site Request Forgery via Missing Browser-Origin Validation in HTTP Operator Endpoints 2026-04-23
CVE-2026-41358 🟢 LOW 2.3 OpenClaw < 2026.4.2 - Sender Allowlist Bypass via Slack Thread Context 2026-04-23
CVE-2026-41916 🟢 LOW 2.3 OpenClaw < 2026.4.8 - Stale Authentication State via Config Reload 2026-04-28
CVE-2026-41908 🟢 LOW 2.3 OpenClaw < 2026.4.20 - Scope Enforcement Bypass in Assistant-Media Route 2026-04-23
CVE-2026-44111 🟢 LOW 2.3 OpenClaw < 2026.4.15 - Arbitrary Markdown File Read via QMD memory_get 2026-05-06
CVE-2026-44993 🟢 LOW 2.3 OpenClaw < 2026.4.20 - Direct Message Misclassification in Feishu Card Actions 2026-05-11
CVE-2026-44997 🟢 LOW 2.3 OpenClaw < 2026.4.22 - Security Envelope Constraint Bypass in ACP Child Sessions 2026-05-11
CVE-2026-44991 🟢 LOW 2.3 OpenClaw: Owner-enforced commands could accept wildcard channel senders as command owners 2026-05-11
CVE-2026-53826 🟢 LOW 2.3 OpenClaw < 2026.4.26 - Information Disclosure via Sandboxed Session Spawn 2026-06-12
CVE-2026-31991 🟢 LOW 2 OpenClaw < 2026.2.26 - Authorization Bypass via DM Pairing-Store Leakage in Signal Group Allowlist 2026-03-19
CVE-2026-32058 🟢 LOW 2 OpenClaw < 2026.2.26 - Approval Context-Binding Weakness in system.run via host=node 2026-03-21

🔄 CVE 发布流水线

48/48 已发布
CVE ID状态CNAGHSA 发布日期cvelistV5
CVE-2026-24763 ✅ PUBLISHED GitHub_M 2026-02-02 ✅ 已收录
CVE-2026-25157 ✅ PUBLISHED GitHub_M 2026-02-02 ✅ 已收录
CVE-2026-25253 ✅ PUBLISHED mitre 2026-02-02 ✅ 已收录
CVE-2026-26317 ✅ PUBLISHED GitHub_M 2026-02-18 ✅ 已收录
CVE-2026-26328 ✅ PUBLISHED GitHub_M 2026-02-18 ✅ 已收录
CVE-2026-28452 ✅ PUBLISHED VulnCheck 2026-02-18 ✅ 已收录
CVE-2026-28458 ✅ PUBLISHED VulnCheck 2026-02-17 ✅ 已收录
CVE-2026-28469 ✅ PUBLISHED VulnCheck 2026-02-18 ✅ 已收录
CVE-2026-28478 ✅ PUBLISHED VulnCheck 2026-02-18 ✅ 已收录
CVE-2026-28480 ✅ PUBLISHED VulnCheck 2026-02-18 ✅ 已收录
CVE-2026-29612 ✅ PUBLISHED VulnCheck 2026-02-18 ✅ 已收录
CVE-2026-41358 ✅ PUBLISHED VulnCheck 2026-05-04 ✅ 已收录
CVE-2026-41389 ✅ PUBLISHED VulnCheck 2026-04-17 ✅ 已收录
CVE-2026-41908 ✅ PUBLISHED VulnCheck 2026-04-25 ✅ 已收录
CVE-2026-42433 ✅ PUBLISHED VulnCheck 2026-04-17 ✅ 已收录
CVE-2026-42434 ✅ PUBLISHED VulnCheck 2026-04-17 ✅ 已收录
CVE-2026-42438 ✅ PUBLISHED VulnCheck 2026-04-17 ✅ 已收录
CVE-2026-42439 ✅ PUBLISHED VulnCheck 2026-04-17 ✅ 已收录
CVE-2026-43526 ✅ PUBLISHED VulnCheck 2026-04-17 ✅ 已收录
CVE-2026-43527 ✅ PUBLISHED VulnCheck 2026-04-17 ✅ 已收录
CVE-2026-43530 ✅ PUBLISHED VulnCheck 2026-04-17 ✅ 已收录
CVE-2026-43533 ✅ PUBLISHED VulnCheck 2026-04-17 ✅ 已收录
CVE-2026-43567 ✅ PUBLISHED VulnCheck 2026-04-17 ✅ 已收录
CVE-2026-43569 ✅ PUBLISHED VulnCheck 2026-04-17 ✅ 已收录
CVE-2026-43570 ✅ PUBLISHED VulnCheck 2026-05-05 ✅ 已收录
CVE-2026-43571 ✅ PUBLISHED VulnCheck 2026-04-17 ✅ 已收录
CVE-2026-43573 ✅ PUBLISHED VulnCheck 2026-04-17 ✅ 已收录
CVE-2026-43576 ✅ PUBLISHED VulnCheck 2026-04-17 ✅ 已收录
CVE-2026-43580 ✅ PUBLISHED VulnCheck 2026-04-17 ✅ 已收录
CVE-2026-43582 ✅ PUBLISHED VulnCheck 2026-04-17 ✅ 已收录
CVE-2026-43585 ✅ PUBLISHED VulnCheck 2026-04-17 ✅ 已收录
CVE-2026-44109 ✅ PUBLISHED VulnCheck 2026-04-17 ✅ 已收录
CVE-2026-44110 ✅ PUBLISHED VulnCheck 2026-04-17 ✅ 已收录
CVE-2026-44112 ✅ PUBLISHED VulnCheck 2026-05-04 ✅ 已收录
CVE-2026-44113 ✅ PUBLISHED VulnCheck 2026-05-04 ✅ 已收录
CVE-2026-44114 ✅ PUBLISHED VulnCheck 2026-04-25 ✅ 已收录
CVE-2026-44116 ✅ PUBLISHED VulnCheck 2026-05-04 ✅ 已收录
CVE-2026-44117 ✅ PUBLISHED VulnCheck 2026-04-25 ✅ 已收录
CVE-2026-44118 ✅ PUBLISHED VulnCheck 2026-05-04 ✅ 已收录
CVE-2026-44991 ✅ PUBLISHED VulnCheck 2026-04-29 ✅ 已收录
CVE-2026-44992 ✅ PUBLISHED VulnCheck 2026-04-25 ✅ 已收录
CVE-2026-44995 ✅ PUBLISHED VulnCheck 2026-04-25 ✅ 已收录
CVE-2026-44997 ✅ PUBLISHED VulnCheck 2026-05-04 ✅ 已收录
CVE-2026-44999 ✅ PUBLISHED VulnCheck 2026-04-25 ✅ 已收录
CVE-2026-45002 ✅ PUBLISHED VulnCheck 2026-04-25 ✅ 已收录
CVE-2026-45003 ✅ PUBLISHED VulnCheck 2026-05-04 ✅ 已收录
CVE-2026-45004 ✅ PUBLISHED VulnCheck 2026-05-05 ✅ 已收录
CVE-2026-45005 ✅ PUBLISHED VulnCheck 2026-05-05 ✅ 已收录
CVE-2026-45004 ✅ PUBLISHED | [GHSA-cwj3-vqpp-pmxr](https://github.com/advisories/GHSA-cwj3-vqpp-pmxr) 2026-05-05 ✅ 已收录
CVE-2026-44118 ✅ PUBLISHED | [GHSA-5mh4-3rv3-fpcf](https://github.com/advisories/GHSA-5mh4-3rv3-fpcf) 2026-05-04 ✅ 已收录
CVE-2026-44114 ✅ PUBLISHED | [GHSA-394x-274p-mqc6](https://github.com/advisories/GHSA-394x-274p-mqc6) 2026-04-25 ✅ 已收录
CVE-2026-44109 ✅ PUBLISHED | [GHSA-2gvc-4f3c-2855](https://github.com/advisories/GHSA-2gvc-4f3c-2855) 2026-04-17 ✅ 已收录
CVE-2026-43585 ✅ PUBLISHED | [GHSA-66r7-m7xm-v49h](https://github.com/advisories/GHSA-66r7-m7xm-v49h) 2026-04-17 ✅ 已收录
CVE-2026-43530 ✅ PUBLISHED | [GHSA-7jp6-r74r-995q](https://github.com/advisories/GHSA-7jp6-r74r-995q) 2026-04-17 ✅ 已收录
CVE-2026-42434 ✅ PUBLISHED | [GHSA-939r-rj45-g2rj](https://github.com/advisories/GHSA-939r-rj45-g2rj) 2026-04-17 ✅ 已收录
CVE-2026-43571 ✅ PUBLISHED | [GHSA-525j-hqq2-66r4](https://github.com/advisories/GHSA-525j-hqq2-66r4) 2026-04-17 ✅ 已收录
CVE-2026-28469 ✅ PUBLISHED | [GHSA-3fqr-4cg8-h96q](https://github.com/advisories/GHSA-3fqr-4cg8-h96q) 2026-02-18 ✅ 已收录
CVE-2026-28478 ✅ PUBLISHED | [GHSA-mr32-vwc2-5j6h](https://github.com/advisories/GHSA-mr32-vwc2-5j6h) 2026-02-18 ✅ 已收录
CVE-2026-25157 ✅ PUBLISHED | [GHSA-g8p2-7wf7-98mq](https://github.com/advisories/GHSA-g8p2-7wf7-98mq) 2026-02-02 ✅ 已收录
CVE-2026-24763 ✅ PUBLISHED | [GHSA-r2c6-8jc8-g32w](https://github.com/advisories/GHSA-r2c6-8jc8-g32w) 2026-02-02 ✅ 已收录
CVE-2026-45005 ✅ PUBLISHED | [GHSA-35mw-5vvr-vrxc](https://github.com/advisories/GHSA-35mw-5vvr-vrxc) 2026-05-05 ✅ 已收录
CVE-2026-44113 ✅ PUBLISHED | [GHSA-wppj-c6mr-83jj](https://github.com/advisories/GHSA-wppj-c6mr-83jj) 2026-05-04 ✅ 已收录
CVE-2026-45003 ✅ PUBLISHED | [GHSA-q3jj-46pq-826r](https://github.com/advisories/GHSA-q3jj-46pq-826r) 2026-05-04 ✅ 已收录
CVE-2026-44116 ✅ PUBLISHED | [GHSA-93rg-2xm5-2p9v](https://github.com/advisories/GHSA-93rg-2xm5-2p9v) 2026-05-04 ✅ 已收录
CVE-2026-44991 ✅ PUBLISHED | [GHSA-gfg9-5357-hv4c](https://github.com/advisories/GHSA-gfg9-5357-hv4c) 2026-04-29 ✅ 已收录
CVE-2026-44992 ✅ PUBLISHED | [GHSA-c4qg-j8jg-42q5](https://github.com/advisories/GHSA-c4qg-j8jg-42q5) 2026-04-25 ✅ 已收录
CVE-2026-44995 ✅ PUBLISHED | [GHSA-2xcp-x87w-q377](https://github.com/advisories/GHSA-2xcp-x87w-q377) 2026-04-25 ✅ 已收录
CVE-2026-41389 ✅ PUBLISHED | [GHSA-f7fh-qg34-x2xh](https://github.com/advisories/GHSA-f7fh-qg34-x2xh) 2026-04-17 ✅ 已收录
CVE-2026-42438 ✅ PUBLISHED | [GHSA-536q-mj95-h29h](https://github.com/advisories/GHSA-536q-mj95-h29h) 2026-04-17 ✅ 已收录
CVE-2026-43573 ✅ PUBLISHED | [GHSA-rj2p-j66c-mgqh](https://github.com/advisories/GHSA-rj2p-j66c-mgqh) 2026-04-17 ✅ 已收录
CVE-2026-43567 ✅ PUBLISHED | [GHSA-53vx-pmqw-863c](https://github.com/advisories/GHSA-53vx-pmqw-863c) 2026-04-17 ✅ 已收录
CVE-2026-43582 ✅ PUBLISHED | [GHSA-2767-2q9v-9326](https://github.com/advisories/GHSA-2767-2q9v-9326) 2026-04-17 ✅ 已收录
CVE-2026-28480 ✅ PUBLISHED | [GHSA-h89v-j3x9-8wqj](https://github.com/advisories/GHSA-h89v-j3x9-8wqj) 2026-02-18 ✅ 已收录
CVE-2026-29612 ✅ PUBLISHED | [GHSA-g34w-4xqq-h79m](https://github.com/advisories/GHSA-g34w-4xqq-h79m) 2026-02-18 ✅ 已收录
CVE-2026-41358 ✅ PUBLISHED | [GHSA-57r2-h2wj-g887](https://github.com/advisories/GHSA-57r2-h2wj-g887) 2026-05-04 ✅ 已收录
CVE-2026-41908 ✅ PUBLISHED | [GHSA-j4c5-89f5-f3pm](https://github.com/advisories/GHSA-j4c5-89f5-f3pm) 2026-04-25 ✅ 已收录

📢 安全公告精选

186+
GHSA-m8wm-r5v CRITICAL
Duplicate Advisory: OpenClaw: Gateway HTTP endpoints re-resolve bearer auth after SecretRef rotation
2026-05-06
GHSA-cjg8-85g CRITICAL
Duplicate Advisory: OpenClaw: Feishu webhook and card-action validation now fail closed
2026-05-06
GHSA-xh72-v6v CRITICAL
OpenClaw: Feishu webhook and card-action validation now fail closed
2026-04-17 CVE-2026-44109
GHSA-xmxx-7p2 CRITICAL
OpenClaw: Gateway HTTP endpoints re-resolve bearer auth after SecretRef rotation
2026-04-17 CVE-2026-43585
GHSA-xpr6-2hg HIGH
Duplicate Advisory: OpenClaw vulnerable to arbitrary code execution via attacker-controlled setup-api.js loaded from cwd during env-key resolution
2026-05-11
GHSA-9r9j-3r2 HIGH
Duplicate Advisory: OpenClaw: Workspace dotenv could override runtime-control environment variables
2026-05-06
GHSA-35vf-vw9 HIGH
Duplicate Advisory: OpenClaw: MCP loopback owner context is derived from server-issued bearer tokens
2026-05-06
GHSA-xrgf-r9g HIGH
Duplicate Advisory: OpenClaw: Exec environment denylist missed high-risk interpreter startup variables
2026-05-06
GHSA-79rr-5c8 HIGH
Duplicate Advisory: OpenClaw: Matrix room control-command authorization no longer trusts DM pairing-store entries
2026-05-06
GHSA-r39h-4c2 HIGH
OpenClaw vulnerable to arbitrary code execution via attacker-controlled setup-api.js loaded from cwd during env-key resolution
2026-05-05 CVE-2026-45004
GHSA-cwj3-vqp HIGH
OpenClaw's gateway config mutation guard allowed unsafe model-driven config writes
2026-05-05
GHSA-r6xh-pqh HIGH
OpenClaw: MCP loopback owner context is derived from server-issued bearer tokens
2026-05-04 CVE-2026-44118

📊 漏洞分类

白名单绕过 (Allowlist Bypass)
60
注入攻击 (XSS/CSRF/Prompt/Command)
34
认证绕过 / 缺失认证
10
SSRF
5
拒绝服务 (DoS)
6
路径穿越 (CWE-22)
3
原型污染 (Prototype Pollution)
1

💡 关键洞察

📈
6.5
平均 CVSS 评分
🔴
102%
HIGH 及以上漏洞占比
⚡
100%
CVE 已发布到 cvelistV5
🛡️
100%
已提供修复版本
🏢
3
CNA 来源 (VulnCheck / GitHub / MITRE)
📦
npm
受影响包 (openclaw)