Skip to content

#openclaw

2 articles

Security Alerts Mar 31, 2026

CVE-2026-33579: Privilege escalation in Openclaw

OpenClaw before 2026.3.28 contains a privilege escalation vulnerability in the /pair approve command path that fails to forward caller scopes into the core approval check. A caller with pairing privil...

Security Alerts Dec 12, 2025

CVE-2026-28363: tools.exec.safeBins validation bypass in OpenClaw

In OpenClaw before 2026.2.23, tools.exec.safeBins validation for sort could be bypassed via GNU long-option abbreviations (such as --compress-prog) in allowlist mode, leading to approval-free executio...