Vulnerabilidades em openclaw

663 resultados
Análise Vexday

A OpenClaw apresenta um portfólio de 47 vulnerabilidades, com 10 descobertas nos últimos 90 dias, indicando atividade contínua de risco. Nenhuma vulnerabilidade está sob exploração ativa registrada (KEV), mas a fraqueza dominante em path traversal (CWE-22) é crítica em ambientes com controle de acesso inadequado. Com apenas 1 vulnerabilidade crítica (CVSS), o risco permanece moderado, mas exige monitoramento nas próximas atualizações da plataforma.

CVE-2026-100535HIGHOpenClaw before 2026.8.1 Privilege Escalation via Session MemoryEPSS 0.3%CVE-2026-35625HIGHOpenClaw < 2026.3.25 - Privilege Escalation via Silent Local Shared-Auth ReconnectEPSS 0.3%CVE-2026-100552HIGHOpenClaw before 2026.8.1 Policy Bypass via Native ToolsEPSS 0.3%CVE-2026-100575HIGHOpenClaw Slack before 2026.8.1 Authentication Bypass via Group DMEPSS 0.3%CVE-2026-41361MEDIUMOpenClaw < 2026.3.28 - SSRF Guard Bypass via IPv6 Special-Use RangesEPSS 0.3%CVE-2026-41358LOWOpenClaw < 2026.4.2 - Sender Allowlist Bypass via Slack Thread ContextEPSS 0.3%CVE-2026-62224LOWOpenClaw MS Teams < 2026.5.12 Authorization BypassEPSS 0.3%CVE-2026-100542LOWOpenClaw before 2026.8.1 Extraction Limit Bypass via tar.bz2EPSS 0.3%CVE-2026-41376LOWOpenClaw < 2026.3.31 - Matrix Thread Context Allowlist Bypass via Sender ValidationEPSS 0.3%CVE-2026-100538HIGHOpenClaw before 2026.8.1 Local File Read via Outbound AttachmentsEPSS 0.3%CVE-2026-42427MEDIUMOpenClaw < 2026.4.8 - Remote Code Execution via Build Tool Environment Variable InjectionEPSS 0.3%CVE-2026-35673MEDIUMOpenClaw < 2026.4.29 - SSRF Policy Bypass via Browser Debug/Export RoutesEPSS 0.3%CVE-2026-22170MEDIUMOpenClaw < 2026.2.22 BlueBubbles - Access Control Bypass via Empty allowFrom ConfigurationEPSS 0.3%CVE-2026-41395HIGHOpenClaw < 2026.3.28 - Webhook Replay via Query Parameter Reordering in Plivo V3EPSS 0.3%CVE-2026-100567HIGHOpenClaw before 2026.8.1 DNS Rebinding via CDP HostnameEPSS 0.3%CVE-2026-100568HIGHOpenClaw before 2026.8.1 Unauthorized Command Job AccessEPSS 0.3%CVE-2026-100548MEDIUMOpenClaw before 2026.8.1 Credential Exposure via Embedding FallbackEPSS 0.3%CVE-2026-62215MEDIUMOpenClaw < 2026.6.5 Authentication Bypass via HTTP CanvasEPSS 0.3%CVE-2026-32923MEDIUMOpenClaw < 2026.3.11 - Authorization Bypass in Discord Guild Reaction Allowlist EnforcementEPSS 0.2%CVE-2026-34507LOWOpenClaw < 2026.4.29 - Policy Bypass in QQBot Admin Commands via DM-only and allowFrom ChecksEPSS 0.2%