Recent Advisories

Severity ID Title Vendor Product Date Type
HIGH 8.7 CVE-2026-53817

OpenClaw < 2026.5.22 - Control UI Locality Spoofing in Device Pairing_CVE-2026-53817

OpenClaw before 2026.5.22 contains a locality validation vulnerability in Control UI pairing that allows attackers with network access to spoof loc...

OpenClaw OpenClaw CVE
HIGH 8.6 CVE-2026-53816

OpenClaw < 2026.5.18 - Exec Lifecycle Event Forgery via Paired Node_CVE-2026-53816

OpenClaw before 2026.5.18 contains an insufficient provenance validation vulnerability in node event handling that allows paired nodes to forge exe...

OpenClaw OpenClaw CVE
HIGH 7.1 CVE-2026-53815

OpenClaw < 2026.5.19 - Channel Allowlist Bypass in Message Read Actions_CVE-2026-53815

OpenClaw before 2026.5.19 contains an authorization bypass vulnerability in message read actions that skips channel allowlist checks. Lower-trust c...

OpenClaw OpenClaw CVE
HIGH 8.7 CVE-2026-53814

OpenClaw < 2026.5.20 - Privilege Escalation via Hook-Triggered CLI MCP Tool Authority_CVE-2026-53814

OpenClaw before 2026.5.20 contains a privilege escalation vulnerability where hook-triggered agent runs incorrectly receive owner-scoped MCP loopba...

OpenClaw OpenClaw CVE
HIGH 7.3 CVE-2026-53813

OpenClaw < 2026.4.25 - Arbitrary Artifact Loading via Fake Package Root Resolution_CVE-2026-53813

OpenClaw before 2026.4.25 contains a path traversal vulnerability in memory-core artifact loading where workspace state influences local package ro...

OpenClaw OpenClaw CVE
HIGH 7.7 CVE-2026-53811

OpenClaw < 2026.5.7 - Privilege Escalation via Mutable Display Names in Matrix allowFrom_CVE-2026-53811

OpenClaw before 2026.5.7 contains a privilege escalation vulnerability in the Matrix allowFrom feature that allows authenticated accounts to match ...

OpenClaw OpenClaw CVE
HIGH 7.7 CVE-2026-53810

OpenClaw < 2026.5.18 - Arbitrary Code Execution via Unscanned Marketplace Runtime Extension Metadata_CVE-2026-53810

OpenClaw before 2026.5.18 contains a code execution vulnerability where marketplace runtime extension metadata can redirect loading toward unscanne...

OpenClaw OpenClaw CVE
HIGH 7.7 CVE-2026-53807

OpenClaw < 2026.5.6 - Authorization Bypass in Telegram Interactive Callbacks via commands.allowFrom_CVE-2026-53807

OpenClaw before 2026.5.6 contains an authorization bypass vulnerability in Telegram interactive callbacks that allows authenticated users to skip c...

OpenClaw OpenClaw CVE
HIGH 7.7 CVE-2026-53806

OpenClaw < 2026.5.12 - Shell Option Parsing Bypass in Exec Revalidation_CVE-2026-53806

OpenClaw before 2026.5.12 contains a shell option parsing vulnerability that allows combined POSIX shell flags to bypass exec revalidation checks. ...

OpenClaw OpenClaw CVE
HIGH 7.7 CVE-2026-50245

Brickcom Cameras Missing Authentication for Critical Function_CVE-2026-50245

Brickcom cameras allow unauthenticated access to live snapshot images via the /ONVIF endpoint and no authentication is required to retrieve still i...

Brickcom Cube 3.2.3.5.6 CVE