O
Vendor security profile
openclaw
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs213
Critical8
CISA KEV0
Public exploit11
Patch rate%30
Avg. CVSS7.0
12-month vulnerability rate
0
0
0
0
26
16
16
20
44
0
91
0
CVE KEV
CVE severity distribution
213toplam CVE
Critical8 (4%)
High110 (52%)
Medium85 (40%)
Low10 (5%)
Patch and exploitation view
%30
Verified patch
%0
CISA KEV
%5
Public exploit
63Patch available
0Partial
0Workaround
0Vendor: no patch
150Unknown
Latest vulnerabilities
7.7
CVE-2026-101884
OpenClaw Windows Node before 2026.7.1 Remote Code Execution via Environment Override
O
Patch verifiedEPSS %0
5.3
CVE-2026-101883
OpenClaw Windows Node through 2026.9.4 SSRF via canvas.present
O
Patch verifiedEPSS %0
8.7
CVE-2026-101882
OpenClaw Windows Node before 2026.7.1 Remote Code Execution via system.execApprovals.set
O
Patch verifiedEPSS %1
7.1
CVE-2026-101881
OpenClaw Windows Node before 2026.7.1 Denial of Service
O
Patch verifiedEPSS %0
8.7
CVE-2026-101880
OpenClaw Windows Node before 2026.7.1 Authorization Bypass
O
Patch verifiedEPSS %1
7.1
CVE-2026-101879
OpenClaw Windows Node before 2026.7.1-3 Missing Authorization
O
Patch verifiedEPSS %0
6.0
CVE-2026-102807
OpenClaw before 2026.9.4 Authorization Bypass via MCP App Standalone Ticket
O
Patch verifiedEPSS %0
6.0
CVE-2026-102806
OpenClaw before 2026.9.5 Sandbox Isolation Bypass via Media Pipelines
O
Patch verifiedEPSS %0
5.3
CVE-2026-100604
ClawHub Authentication Bypass via Former Publisher Skill Control
O
Patch verifiedEPSS %0
8.7
CVE-2026-100603
ClawHub before 8c2de6c506 Skill Hiding via Coordinated Reports
O
Patch verifiedEPSS %0