High, CVSS 7.1
OpenClaw: Host exec environment sanitization misses package, registry, Docker, compiler, and TLS override variables
npm openclaw · Upgrade to 2026.3.31 or later · <= 2026.3.28 · CVE-2026-41369 · GHSA-cg7q-fg22-4g98 · amended
Know what to patch next.
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
At a glance
- New
- 934 Actionable advisories published in the last 30 days (UTC), within the selected severities, against 1,115 in the 30 days before.
- Critical
- 62 Actionable advisories published in the last 30 days (UTC) and rated CVSS 9.0 or higher, within the selected severities.
Activity · last 26 weeks
Actionable
8301–8325 of 31,057 matching · newest first
- Medium, CVSS 5.3
OpenClaw: Path traversal via inbound channel attachment path in ACP dispatch allows arbitrary file read
npm openclaw · Upgrade to 2026.3.31 or later · <= 2026.3.28 · CVE-2026-41370 · GHSA-58q2-7r52-jq62 · amended
- High, CVSS 8.6
OpenClaw: Incomplete scope-clearing fix allows operator.admin escalation via trusted-proxy auth mode
npm openclaw · Upgrade to 2026.3.31 or later · <= 2026.3.28 · CVE-2026-41404 · GHSA-g374-mggx-p6xc · amended
- High, CVSS 7.1
OpenClaw: Media Parsing Path Traversal Leads to Arbitrary File Read
npm openclaw · Upgrade to 2026.3.28 or later · <= 2026.3.24 · CVE-2026-32846 · GHSA-f6pf-4gjx-c94r · amended
- High, CVSS 8.2
OpenClaw: Agentic Consent Bypass — LLM Agent Can Silently Disable Exec Approval via
config.patchnpm openclaw · Upgrade to 2026.3.28 or later · <= 2026.3.24 · CVE-2026-41349 · GHSA-v3qc-wrwx-j3pw · amended
- Medium, CVSS 6.9
OpenClaw Has a Gateway Control Interface Information Disclosure Vulnerability
npm openclaw · Upgrade to 2026.3.31 or later · <= 2026.3.28 · CVE-2026-41335 · GHSA-hr8g-2q7x-3f4w · amended
- Medium, CVSS 5.8
OpenClaw: Sandbox file operations use check-then-act, bypassing fd-based TOCTOU defenses
npm openclaw · Upgrade to 2026.3.31 or later · <= 2026.3.28 · CVE-2026-41338 · GHSA-rm5c-4rmf-vvhw · amended
- Medium, CVSS 6.9
OpenClaw: Image pixel-limit guard can fail open on sips and allow decompression-bomb DoS
npm openclaw · Upgrade to 2026.3.31 or later · <= 2026.3.28 · CVE-2026-41334 · GHSA-w85g-3h6x-4xh2 · amended
- High, CVSS 7.3
OpenClaw: Incomplete host-env-security-policy allows untrusted model to substitute compiler binaries via env overrides
npm openclaw · Upgrade to 2026.3.31 or later · <= 2026.3.28 · CVE-2026-41373 · GHSA-g8xp-qx39-9jq9 · amended
- High, CVSS 7.7
OpenClaw: Device-Paired Node Skips Node Scope Gate → Host RCE.md
npm openclaw · Upgrade to 2026.3.31 or later · <= 2026.3.28 · CVE-2026-41352 · GHSA-xj9w-5r6q-x6v4 · amended
- Medium, CVSS 6.3
OpenClaw: Telnyx Webhook Replay Detection Bypass via Base64 Signature Re-encoding
npm openclaw · Upgrade to 2026.3.31 or later · <= 2026.3.28 · CVE-2026-41351 · GHSA-37v6-fxx8-xjmx · amended
- Medium, CVSS 4.8
OpenClaw: Host exec environment overrides miss proxy, TLS, Docker, and Git TLS controls
npm openclaw · Upgrade to 2026.3.31 or later · <= 2026.3.28 · CVE-2026-41330 · GHSA-9gp8-hjxr-6f34 · amended
- Medium, CVSS 6.9
OpenClaw runs Discord audio preflight transcription before member authorization
npm openclaw · Upgrade to 2026.3.31 or later · <= 2026.3.28 · CVE-2026-41374 · GHSA-hhff-fj5f-qg48 · amended
- Low, CVSS 2.3
OpenClaw: HTTP operator endpoints lack browser-origin validation in trusted-proxy mode
npm openclaw · Upgrade to 2026.3.31 or later · <= 2026.3.28 · CVE-2026-41347 · GHSA-mhr7-2xmv-4c4q · amended
- High, CVSS 8.7
OpenClaw: MS Teams webhook parses body before JWT validation, enabling unauthenticated resource exhaustion
npm openclaw · Upgrade to 2026.3.31 or later · <= 2026.3.28 · CVE-2026-41405 · GHSA-p464-m8x6-vhv8 · amended
- High, CVSS 7.2
OpenClaw: Self-Whitelisting in appendLocalMediaParentRoots Allows Arbitrary File Read & Credential Exfiltration
npm openclaw · Upgrade to 2026.3.31 or later · <= 2026.3.28 · CVE-2026-41366 · GHSA-57gh-m6rq-54cf · amended
- Medium, CVSS 6.0
OpenClaw: Media download follows cross-origin redirects with Authorization headers intact
npm openclaw · Upgrade to 2026.3.31 or later · <= 2026.3.28 · CVE-2026-41345 · GHSA-68v4-hmwv-f43h · amended
- High, CVSS 8.7
OpenClaw: OpenShell Mirror Sync — Sandbox Escape via Unrestricted File Sync + Symlink Traversal
npm openclaw · Upgrade to 2026.3.31 or later · <= 2026.3.28 · CVE-2026-41397 · GHSA-cwf8-44x6-32c2 · amended
- High, CVSS 7.3
OpenClaw: Workspace
.envcan override the bundled plugin trust rootnpm openclaw · Upgrade to 2026.3.31 or later · <= 2026.3.28 · CVE-2026-41396 · GHSA-qcj9-wwgw-6gm8 · amended
- High, CVSS 8.3
Electron: Context Isolation bypass via contextBridge VideoFrame transfer
npm electron · Upgrade to 41.0.0-beta.8 (pre-release), 40.7.0 or 39.8.0 by release line · >= 39.0.0-alpha.1, < 39.8.0; >= 40.0.0-alpha.1, < 40.7.0; >= 41.0.0-alpha.1, < 41.0.0-beta.8 · CVE-2026-34780 · GHSA-jfqg-hf23-qpw2 · amended
- Medium, CVSS 6.5
Electron: AppleScript injection in app.moveToApplicationsFolder on macOS
npm electron · Upgrade to 41.0.0-beta.8 (pre-release), 40.8.0, 39.8.1 or 38.8.6 by release line · < 38.8.6; >= 39.0.0-alpha.1, < 39.8.1; >= 40.0.0-alpha.1, < 40.8.0; >= 41.0.0-alpha.1, < 41.0.0-beta.8 · CVE-2026-34779 · GHSA-5rqw-r77c-jp79 · amended
- Medium, CVSS 5.9
Electron: Service worker can spoof executeJavaScript IPC replies
npm electron · Upgrade to 41.0.0, 40.8.1, 39.8.1 or 38.8.6 by release line · < 38.8.6; >= 39.0.0-alpha.1, < 39.8.1; >= 40.0.0-alpha.1, < 40.8.1; >= 41.0.0-alpha.1, < 41.0.0 · CVE-2026-34778 · GHSA-xj5x-m3f3-5x3h · amended
- Medium, CVSS 5.4
Electron: Incorrect origin passed to permission request handler for iframe requests
npm electron · Upgrade to 41.0.0, 40.8.1, 39.8.1 or 38.8.6 by release line · < 38.8.6; >= 39.0.0-alpha.1, < 39.8.1; >= 40.0.0-alpha.1, < 40.8.1; >= 41.0.0-alpha.1, < 41.0.0 · CVE-2026-34777 · GHSA-r5p7-gp4j-qhrx · amended
- Medium, CVSS 5.3
Electron: Out-of-bounds read in second-instance IPC on macOS and Linux
npm electron · Upgrade to 41.0.0, 40.8.1, 39.8.1 or 38.8.6 by release line · < 38.8.6; >= 39.0.0-alpha.1, < 39.8.1; >= 40.0.0-alpha.1, < 40.8.1; >= 41.0.0-alpha.1, < 41.0.0 · CVE-2026-34776 · GHSA-3c8v-cfp5-9885 · amended
- Medium, CVSS 6.8
Electron: nodeIntegrationInWorker not correctly scoped in shared renderer processes
npm electron · Upgrade to 41.0.0, 40.8.4, 39.8.4 or 38.8.6 by release line · < 38.8.6; >= 39.0.0-alpha.1, < 39.8.4; >= 40.0.0-alpha.1, < 40.8.4; >= 41.0.0-alpha.1, < 41.0.0 · CVE-2026-34775 · GHSA-xwr5-m59h-vwqr · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
News
Security reports that are not matched to your stack.
CISA security events · all vendors
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
Advisory watch · no fix evidence
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.