Medium, CVSS 5.1
OpenClaw has Windows Lobster shell fallback command injection in constrained fallback path
npm openclaw · Upgrade to 2026.2.19 or later · >= 2026.1.21, <= 2026.2.17 · CVE-2026-31995 · GHSA-fg3m-vhrr-8gj6 · amended
Know what to patch next.
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
At a glance
- New
- 934 Actionable advisories published in the last 30 days (UTC), within the selected severities, against 1,115 in the 30 days before.
- Critical
- 62 Actionable advisories published in the last 30 days (UTC) and rated CVSS 9.0 or higher, within the selected severities.
Activity · last 26 weeks
Actionable
9626–9650 of 31,071 matching · newest first
- Medium, CVSS 5.3
OpenClaw's Zalo group sender allowlist bypass permits unauthorized GROUP dispatch
npm openclaw · Upgrade to 2026.2.24 or later · <= 2026.2.23 · GHSA-534w-2vm4-89xr · amended
- Medium, CVSS 6.3
OpenClaw has Canvas route hardening for mixed-trust deployments
npm openclaw · Upgrade to 2026.2.21 or later · < 2026.2.21 · GHSA-cjv3-m589-v3rx · amended
- High, CVSS 7.1
OpenClaw's exec allowlist wrapper analysis did not unwrap env/shell dispatch chains
npm openclaw · Upgrade to 2026.2.22 or later · < 2026.2.22 · CVE-2026-27566 · GHSA-jj82-76v6-933r · amended
- Medium, CVSS 6.0
OpenClaw's typed sender-key matching for toolsBySender prevents identity-collision policy bypass
npm openclaw · Upgrade to 2026.2.22 or later · < 2026.2.22 · CVE-2026-32039 · GHSA-wpph-cjgr-7c39 · amended
- Medium, CVSS 6.3
OpenClaw's Signal reaction-only status events could, in limited cases, be enqueued before access checks
npm openclaw · Upgrade to 2026.2.25 or later · <= 2026.2.24 · CVE-2026-32050 · GHSA-792q-qw95-f446 · amended
- High, CVSS 7.0
OpenClaw's sandbox bind validation could bypass allowed-root and blocked-path checks via symlink-parent missing-leaf paths
npm openclaw · Upgrade to 2026.2.24 or later · <= 2026.2.23 · CVE-2026-27523 · GHSA-m8v2-6wwh-r4gc · amended
- High, CVSS 7.1
OpenClaw: Zip extraction symlink traversal could write outside destination
npm openclaw · Upgrade to 2026.2.22 or later · < 2026.2.22 · GHSA-jxrq-8fm4-9p58 · amended
- Medium, CVSS 5.3
OpenClaw's Nextcloud Talk webhook replay could trigger duplicate inbound processing
npm openclaw · Upgrade to 2026.2.25 or later · <= 2026.2.24 · CVE-2026-28449 · GHSA-r9q5-c7qc-p26w · amended
- Low, CVSS 2.3
OpenClaw's tools.exec.safeBins generic fallback allowed interpreter-style inline payload execution in allowlist mode
npm openclaw · Upgrade to 2026.2.22 or later · < 2026.2.22 · GHSA-8mf7-vv8w-hjr2 · amended
- Medium, CVSS 5.3
OpenClaw's Synology Chat dmPolicy=allowlist failed open on empty allowedUserIds, allowing unauthorized agent dispatch
npm openclaw · Upgrade to 2026.2.24 or later · >= 2026.2.22, <= 2026.2.23 · CVE-2026-31998 · GHSA-gw85-xp4q-5gp9 · amended
- Low, CVSS 2.1
OpenClaw reuses the gateway auth token in the owner ID prompt hashing fallback
npm openclaw · Upgrade to 2026.2.22 or later · <= 2026.2.21-2 · CVE-2026-32897 · GHSA-v6x2-2qvm-6gv8 · amended
- High, CVSS 7.3
OpenClaw hook transform path containment missed symlink-resolved escapes
npm openclaw · Upgrade to 2026.2.22 or later · <= 2026.2.21-2 · GHSA-659f-22xc-98f2 · amended
- Medium, CVSS 5.8
In OpenClaw, manually adding sort to tools.exec.safeBins could bypass allowlist approval via --compress-program
npm openclaw · Upgrade to 2026.2.22 or later · <= 2026.2.21-2 · CVE-2026-32010 · GHSA-4gc7-qcvf-38wg · amended
- Medium, CVSS 5.3
OpenClaw has a BlueBubbles group allowlist mismatch via DM pairing-store fallback
npm openclaw · Upgrade to 2026.2.26 or later · <= 2026.2.25 · CVE-2026-32006 · GHSA-25pw-4h6w-qwvm · amended
- Low, CVSS 3.7
OpenClaw's voice-call Twilio replay dedupe now bound to authenticated webhook identity
npm openclaw · Upgrade to 2026.2.26 or later · <= 2026.2.25 · GHSA-gcj7-r3hg-m7w6 · amended
- High, CVSS 8.4
OpenClaw has multiple E2E/test Dockerfiles that run all processes as root
npm openclaw · Upgrade to 2026.2.21 or later · < 2026.2.21 · GHSA-w7j5-j98m-w679 · amended
- Medium, CVSS 5.7
OpenClaw has exec allowlist/safeBins policy-runtime mismatch via env -S wrapper interpretation
npm openclaw · Upgrade to 2026.2.23 or later · < 2026.2.23 · GHSA-796m-2973-wc5q · amended
- Low, CVSS 2.3
OpenClaw: Microsoft Teams media fetch paths bypass shared SSRF guard model
npm openclaw · Upgrade to 2026.2.26 or later · <= 2026.2.25 · GHSA-7qf6-h84j-8fq4 · amended
- Medium, CVSS 5.7
OpenClaw's browser-origin WebSocket auth hardening gap could enable loopback password brute-force chains
npm openclaw · Upgrade to 2026.2.25 or later · <= 2026.2.24 · CVE-2026-32025 · GHSA-jmmg-jqc7-5qf4 · amended
- Medium, CVSS 6.3
OpenClaw improperly parses X-Forwarded-For behind trusted proxies allows client IP spoofing in security decisions
npm openclaw · Upgrade to 2026.2.21 or later · <= 2026.2.19-2 · CVE-2026-32029 · GHSA-2rgf-hm63-5qph · amended
- High, CVSS 7.3
OpenClaw's non-default autoAllowSkills setting could bypass on-miss exec prompt
npm openclaw · Upgrade to 2026.2.23 or later · <= 2026.2.22-2 · GHSA-7ff8-xjh3-mgh6 · amended
- High, CVSS 7.7
OpenClaw's shell startup env injection bypasses system.run allowlist intent (RCE class)
npm openclaw · Upgrade to 2026.2.22 or later · < 2026.2.22 · CVE-2026-32056 · GHSA-xgf2-vxv2-rrmg · amended
- Low, CVSS 2.0
OpenClaw's runtime /debug override path accepted prototype-reserved keys
npm openclaw · Upgrade to 2026.2.21 or later · < 2026.2.21 · CVE-2026-27524 · GHSA-62f6-mrcj-v8h5 · amended
- Medium, CVSS 5.7
OpenClaw has a workspace-only sandbox guard mismatch for @-prefixed absolute paths
npm openclaw · Upgrade to 2026.2.24 or later · <= 2026.2.23 · CVE-2026-32033 · GHSA-27cr-4p5m-74rj · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
News
Security reports that are not matched to your stack.
CISA security events · all vendors
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
Advisory watch · no fix evidence
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratedPyPI
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratedPyPI
Listed as news: the source report lacks affected versions, a fix, or verified evidence.