Medium, CVSS 4.9
OpenClaw: node.pair.approve missing callerScopes validation allows low-privilege operator to approve malicious nodes
npm openclaw · Upgrade to 2026.3.28 or later · <= 2026.3.24 · CVE-2026-33577 · GHSA-2x4x-cc5g-qmmg · amended
Know what to patch next.
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
At a glance
- New
- 934 Actionable advisories published in the last 30 days (UTC), within the selected severities, against 1,115 in the 30 days before.
- Critical
- 62 Actionable advisories published in the last 30 days (UTC) and rated CVSS 9.0 or higher, within the selected severities.
Activity · last 26 weeks
Actionable
8476–8500 of 31,057 matching · newest first
- High, CVSS 7.3
OpenClaw has a gateway exec allowlist allow-always bypass via unregistered /usr/bin/script wrapper
npm openclaw · Upgrade to 2026.3.28 or later · <= 2026.3.24 · CVE-2026-41390 · GHSA-6pfc-6m7w-m8fx · amended
- High, CVSS 8.5
OpenClaw's incomplete host env sanitization blocklist allows supply-chain redirection via package-manager env overrides
npm openclaw · Upgrade to 2026.3.22 or later · < 2026.3.22 · CVE-2026-41387 · GHSA-j7p2-qcwm-94v4 · amended
- Unrated
OpenClaw's Nextcloud Talk webhook missing rate limiting on shared secret authentication
npm openclaw · Upgrade to 2026.3.28 or later · <= 2026.3.24 · CVE-2026-33580 · GHSA-9528-x887-j2fp · amended
- Low, CVSS 3.1
OpenClaw SSRF guard misses four IPv6 special-use ranges
npm openclaw · Upgrade to 2026.3.28 or later · <= 2026.3.24 · CVE-2026-41361 · GHSA-g86v-f9qv-rh6m · amended
- Medium, CVSS 5.3
OpenClaw's Discord component interaction ingress skips guild/channel policy enforcement
npm openclaw · Upgrade to 2026.3.28 or later · >= 2026.2.14, <= 2026.3.24 · CVE-2026-41367 · GHSA-jp4j-q5fc-58gv · amended
- Unrated
OpenClaw: Gateway chat.send ACP-only provenance guard could be bypassed by client identity spoofing
npm openclaw · Upgrade to 2026.3.28 or later · <= 2026.3.24 · CVE-2026-41299 · GHSA-6xg4-82hv-cp6f · amended
- Medium, CVSS 5.3
OpenClaw: Gateway
operator.writecan reach admin-only persistedverboseLevelviachat.send/verbosenpm openclaw · Upgrade to 2026.3.28 or later · <= 2026.3.24 · CVE-2026-41344 · GHSA-5h2w-qmfp-ggp6 · amended
- Medium, CVSS 4.9
OpenClaw host-env blocklist missing
GIT_TEMPLATE_DIRandAWS_CONFIG_FILEallows code execution via env overridenpm openclaw · Upgrade to 2026.3.28 or later · <= 2026.3.24 · CVE-2026-41332 · GHSA-m866-6qv5-p2fg · amended
- High, CVSS 7.7
OpenClaw safeBins jq
$ENVfilter bypass allows environment variable disclosurenpm openclaw · Upgrade to 2026.3.28 or later · <= 2026.3.24 · CVE-2026-41368 · GHSA-jccr-rrw2-vc8h · amended
- High, CVSS 7.1
OpenClaw's message tool media parameter bypasses tool policy filesystem isolation
npm openclaw · Upgrade to 2026.3.24 or later · < 2026.3.24 · CVE-2026-33581 · GHSA-v8wv-jg3q-qwpq · amended
- Medium, CVSS 5.3
OpenClaw: Gateway WebSocket Denial of Service via unbounded pre-auth upgrades
npm openclaw · Upgrade to 2026.3.28 or later · <= 2026.3.24 · CVE-2026-41399 · GHSA-f44p-c7w9-7xr7 · amended
- Medium, CVSS 6.0
OpenClaw: Feishu extension resolveUploadInput bypasses file-system sandbox and allows arbitrary file reads via upload_image
npm openclaw · Upgrade to 2026.3.28 or later · >= 2026.2.6, <= 2026.3.24 · CVE-2026-41363 · GHSA-qf48-qfv4-jjm9 · amended
- High, CVSS 8.7
OpenClaw: Discord text
/approvebypasseschannels.discord.execApprovals.approversand allows non-approvers to resolve pending exec approvalsnpm openclaw · Upgrade to 2026.3.28 or later · <= 2026.3.24 · CVE-2026-41303 · GHSA-98hh-7ghg-x6rq · amended
- High, CVSS 8.6
OpenClaw's device removal and token revocation do not terminate active WebSocket sessions
npm openclaw · Upgrade to 2026.3.28 or later · <= 2026.3.24 · CVE-2026-34503 · GHSA-2pr2-hcv6-7gwv · amended
- High, CVSS 7.4
OpenClaw: CLI Remote Onboarding Persists Unauthenticated Discovery Endpoint and Exfiltrates Gateway Credentials
npm openclaw · Upgrade to 2026.3.28 or later · <= 2026.3.24 · CVE-2026-41342 · GHSA-3cw3-5vxw-g2h3 · amended
- Medium, CVSS 6.9
OpenClaw: Zalo channel downloads media before sender authorization
npm openclaw · Upgrade to 2026.3.28 or later · <= 2026.3.24 · CVE-2026-33576 · GHSA-v2v2-f783-358j · amended
- Critical, CVSS 9.4
OpenClaw: /pair approve command path omitted caller scope subsetting and reopened device pairing escalation
npm openclaw · Upgrade to 2026.3.28 or later · <= 2026.3.24 · CVE-2026-33579 · GHSA-hc5h-pmr3-3497 · amended
- High, CVSS 8.2
OpenClaw: Voice-call Plivo V3 webhook replay key uses unsorted URL, allowing replay via query-parameter reordering
npm openclaw · Upgrade to 2026.3.28 or later · < 2026.3.28 · CVE-2026-41395 · GHSA-8689-gm9g-jgr6 · amended
- High, CVSS 8.2
parse-server has GraphQL complexity validator exponential fragment traversal DoS
npm parse-server · Upgrade to 9.7.0-alpha.12 (pre-release) or 8.6.68 by release line · >= 9.0.0, < 9.7.0-alpha.12; < 8.6.68 · CVE-2026-34573 · GHSA-mfj6-6p54-m98c · amended
- Critical, CVSS 9.1
parse-server has cloud function validator bypass via prototype chain traversal
npm parse-server · Upgrade to 9.7.0-alpha.11 (pre-release) or 8.6.67 by release line · >= 9.0.0, < 9.7.0-alpha.11; < 8.6.67 · CVE-2026-34532 · GHSA-vpj2-qq7w-5qq6 · amended
- Medium, CVSS 6.5
Flask-HTTPAuth invokes token verification callback when missing or empty token was given by client
PyPI flask-httpauth · Upgrade to 4.8.1 or later · <= 4.8.0 · CVE-2026-34531 · GHSA-p44q-vqpr-4xmg · amended
- Medium, CVSS 6.9
File Browser vulnerable to Stored Cross-site Scripting via text/template branding injection
Go github.com/filebrowser/filebrowser/v2 · Upgrade to 2.62.2 or later · <= 2.62.1 · CVE-2026-34530 · GHSA-xfqj-3vmx-63wv
- High, CVSS 8.1
File Browser's Signup Grants Execution Permissions When Default Permissions Includes Execution
Go github.com/filebrowser/filebrowser/v2 · Upgrade to 2.62.2 or later · <= 2.62.1 · CVE-2026-34528 · GHSA-x8jc-jvqm-pm3f
- High, CVSS 7.6
File Browser is vulnerable to Stored Cross-site Scripting via crafted EPUB file
Go github.com/filebrowser/filebrowser/v2 · Upgrade to 2.62.2 or later · <= 2.62.1 · CVE-2026-34529 · GHSA-5vpr-4fgw-f69h
A vendor fix does not resolve your finding until you verify it in your own systems.
News
Security reports that are not matched to your stack.
CISA security events · all vendors
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
Advisory watch · no fix evidence
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.