{"schema_version":1,"title":"openclaw (npm) vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 214 vulnerabilities in openclaw (npm): 0 in the last 7 days and 0 in the last 90 days, 8 of them critical and 0 exploited in the wild. The most recent, CVE-2026-62208, was published on 17 July 2026.","url":"https://junglewise.ai/threats/technologies/npm-openclaw","json_url":"https://junglewise.ai/threats/technologies/npm-openclaw.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/npm-openclaw","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":false,"counts":{"high":72,"all_time":214,"critical":8,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":0,"last_365_days":214},"latest":[{"cve":"CVE-2026-62208","cvss":6.5,"epss":0.0036,"slug":"cve-2026-62208-openclaw-credential-leakage-via-authorization-header-forwarding","title":"OpenClaw credential leakage via Authorization header forwarding in MCP SSE","severity":"medium","exploited":false,"published_at":"2026-07-17T02:18:07.187+00:00","url":"https://junglewise.ai/threats/cve-2026-62208-openclaw-credential-leakage-via-authorization-header-forwarding"},{"cvss":8.5,"slug":"duplicate-advisory-browser-cdp-discovery-could-accept-blocked-websocket-6e8b9668","title":"Duplicate Advisory: Browser CDP discovery could accept blocked WebSocket URLs","severity":"high","exploited":false,"published_at":"2026-07-14T00:31:04+00:00","url":"https://junglewise.ai/threats/duplicate-advisory-browser-cdp-discovery-could-accept-blocked-websocket-6e8b9668"},{"cve":"CVE-2026-62197","cvss":8.5,"epss":0.0033,"slug":"cve-2026-62197-openclaw-policy-bypass-in-browser-cdp-discovery","title":"OpenClaw policy bypass in browser CDP discovery","severity":"high","exploited":false,"published_at":"2026-07-13T22:16:51.38+00:00","url":"https://junglewise.ai/threats/cve-2026-62197-openclaw-policy-bypass-in-browser-cdp-discovery"},{"cve":"CVE-2026-53866","cvss":8.1,"epss":0.0045,"slug":"cve-2026-53866-openclaw-allowlist-bypass-in-shell-inline-command-parsing","title":"OpenClaw allowlist bypass in shell inline-command parsing","severity":"high","exploited":false,"published_at":"2026-06-16T19:17:05.023+00:00","url":"https://junglewise.ai/threats/cve-2026-53866-openclaw-allowlist-bypass-in-shell-inline-command-parsing"},{"cve":"CVE-2026-53865","cvss":7.1,"epss":0.0018,"slug":"cve-2026-53865-openclaw-path-traversal-in-maintenance-task-execution","title":"OpenClaw path traversal in maintenance task execution","severity":"high","exploited":false,"published_at":"2026-06-16T19:17:04.89+00:00","url":"https://junglewise.ai/threats/cve-2026-53865-openclaw-path-traversal-in-maintenance-task-execution"},{"cve":"CVE-2026-53864","cvss":8.1,"epss":0.0043,"slug":"cve-2026-53864-openclaw-insufficient-sanitization-in-host-environment-sanitizer","title":"OpenClaw insufficient sanitization in host environment sanitizer","severity":"high","exploited":false,"published_at":"2026-06-16T19:17:04.76+00:00","url":"https://junglewise.ai/threats/cve-2026-53864-openclaw-insufficient-sanitization-in-host-environment-sanitizer"},{"cve":"CVE-2026-53863","cvss":7.1,"epss":0.0029,"slug":"cve-2026-53863-openclaw-authorization-bypass-via-unvalidated-group-ids","title":"OpenClaw authorization bypass via unvalidated group IDs","severity":"high","exploited":false,"published_at":"2026-06-16T19:17:04.633+00:00","url":"https://junglewise.ai/threats/cve-2026-53863-openclaw-authorization-bypass-via-unvalidated-group-ids"},{"cve":"CVE-2026-53862","cvss":4.2,"epss":0.0013,"slug":"cve-2026-53862-openclaw-bootstrap-token-replay-in-pending-pairing-scopes","title":"OpenClaw bootstrap token replay in pending pairing scopes","severity":"medium","exploited":false,"published_at":"2026-06-16T19:17:04.16+00:00","url":"https://junglewise.ai/threats/cve-2026-53862-openclaw-bootstrap-token-replay-in-pending-pairing-scopes"},{"cve":"CVE-2026-53861","cvss":6.6,"epss":0.0045,"slug":"cve-2026-53861-openclaw-allowlist-bypass-in-macos-swift-exec-feature","title":"OpenClaw allowlist bypass in macOS Swift exec feature","severity":"medium","exploited":false,"published_at":"2026-06-16T19:17:04.027+00:00","url":"https://junglewise.ai/threats/cve-2026-53861-openclaw-allowlist-bypass-in-macos-swift-exec-feature"},{"cve":"CVE-2026-53860","cvss":4.2,"epss":0.0023,"slug":"cve-2026-53860-openclaw-sender-policy-bypass-in-bluebubbles-integration","title":"OpenClaw sender policy bypass in BlueBubbles integration","severity":"medium","exploited":false,"published_at":"2026-06-16T19:17:03.573+00:00","url":"https://junglewise.ai/threats/cve-2026-53860-openclaw-sender-policy-bypass-in-bluebubbles-integration"},{"cve":"CVE-2026-53859","cvss":6.5,"epss":0.0036,"slug":"cve-2026-53859-openclaw-hostname-validation-bypass-in-model-and-workspace-urls","title":"OpenClaw hostname validation bypass in model and workspace URLs","severity":"medium","exploited":false,"published_at":"2026-06-16T19:17:03.44+00:00","url":"https://junglewise.ai/threats/cve-2026-53859-openclaw-hostname-validation-bypass-in-model-and-workspace-urls"},{"cve":"CVE-2026-53858","cvss":7.1,"epss":0.0018,"slug":"cve-2026-53858-openclaw-environment-variable-injection-in-state-directory","title":"OpenClaw environment variable injection in STATE_DIRECTORY","severity":"high","exploited":false,"published_at":"2026-06-16T19:17:03.31+00:00","url":"https://junglewise.ai/threats/cve-2026-53858-openclaw-environment-variable-injection-in-state-directory"},{"cve":"CVE-2026-53857","cvss":8.1,"epss":0.0037,"slug":"cve-2026-53857-openclaw-policy-enforcement-bypass-in-zalo-allowfrom-policy","title":"OpenClaw policy enforcement bypass in Zalo allowFrom policy","severity":"high","exploited":false,"published_at":"2026-06-16T19:17:03.18+00:00","url":"https://junglewise.ai/threats/cve-2026-53857-openclaw-policy-enforcement-bypass-in-zalo-allowfrom-policy"},{"cve":"CVE-2026-53856","cvss":5.5,"epss":0.0014,"slug":"cve-2026-53856-openclaw-insecure-file-permissions-in-config-recovery","title":"OpenClaw insecure file permissions in config recovery","severity":"medium","exploited":false,"published_at":"2026-06-16T19:17:03.047+00:00","url":"https://junglewise.ai/threats/cve-2026-53856-openclaw-insecure-file-permissions-in-config-recovery"},{"cve":"CVE-2026-53855","cvss":8.1,"epss":0.0045,"slug":"cve-2026-53855-openclaw-inline-eval-bypass-via-shell-positional-parameters","title":"OpenClaw inline-eval bypass via shell positional parameters","severity":"high","exploited":false,"published_at":"2026-06-16T19:17:02.91+00:00","url":"https://junglewise.ai/threats/cve-2026-53855-openclaw-inline-eval-bypass-via-shell-positional-parameters"},{"cve":"CVE-2026-53854","cvss":6.5,"epss":0.0041,"slug":"cve-2026-53854-openclaw-privilege-escalation-in-internal-and-webchat-command","title":"OpenClaw privilege escalation in internal and webchat command authentication","severity":"medium","exploited":false,"published_at":"2026-06-16T19:17:02.78+00:00","url":"https://junglewise.ai/threats/cve-2026-53854-openclaw-privilege-escalation-in-internal-and-webchat-command"},{"cve":"CVE-2026-53853","cvss":8.3,"epss":0.006,"slug":"cve-2026-53853-openclaw-argument-pattern-validation-bypass-in-exec-allowlist","title":"OpenClaw argument pattern validation bypass in exec allowlist","severity":"high","exploited":false,"published_at":"2026-06-16T19:17:02.65+00:00","url":"https://junglewise.ai/threats/cve-2026-53853-openclaw-argument-pattern-validation-bypass-in-exec-allowlist"},{"cve":"CVE-2026-53852","cvss":5.4,"epss":0.0028,"slug":"cve-2026-53852-openclaw-scope-containment-bypass-in-device-re-pairing","title":"OpenClaw scope containment bypass in device re-pairing","severity":"medium","exploited":false,"published_at":"2026-06-16T19:17:02.51+00:00","url":"https://junglewise.ai/threats/cve-2026-53852-openclaw-scope-containment-bypass-in-device-re-pairing"},{"cve":"CVE-2026-53851","cvss":5.3,"epss":0.0032,"slug":"cve-2026-53851-openclaw-slack-reaction-event-notification-bypass","title":"OpenClaw Slack reaction event notification bypass","severity":"medium","exploited":false,"published_at":"2026-06-16T19:17:02.327+00:00","url":"https://junglewise.ai/threats/cve-2026-53851-openclaw-slack-reaction-event-notification-bypass"},{"cve":"CVE-2026-53850","cvss":5.5,"epss":0.0014,"slug":"cve-2026-53850-openclaw-authorization-bypass-in-focus-command","title":"OpenClaw authorization bypass in focus command","severity":"medium","exploited":false,"published_at":"2026-06-16T19:17:02.183+00:00","url":"https://junglewise.ai/threats/cve-2026-53850-openclaw-authorization-bypass-in-focus-command"},{"cve":"CVE-2026-53849","cvss":8.1,"epss":0.0037,"slug":"cve-2026-53849-openclaw-privilege-escalation-in-allowfrom-feature","title":"OpenClaw privilege escalation in allowFrom feature","severity":"high","exploited":false,"published_at":"2026-06-16T19:17:02.053+00:00","url":"https://junglewise.ai/threats/cve-2026-53849-openclaw-privilege-escalation-in-allowfrom-feature"},{"cve":"CVE-2026-53848","cvss":4.3,"epss":0.0031,"slug":"cve-2026-53848-openclaw-exec-allowlist-bypass-via-transparent-command-wrappers","title":"OpenClaw exec allowlist bypass via transparent command wrappers","severity":"medium","exploited":false,"published_at":"2026-06-16T19:17:01.92+00:00","url":"https://junglewise.ai/threats/cve-2026-53848-openclaw-exec-allowlist-bypass-via-transparent-command-wrappers"},{"cve":"CVE-2026-53847","cvss":5.4,"epss":0.003,"slug":"cve-2026-53847-openclaw-privilege-escalation-in-active-memory-write-scope","title":"OpenClaw privilege escalation in Active Memory write scope","severity":"medium","exploited":false,"published_at":"2026-06-16T19:17:01.79+00:00","url":"https://junglewise.ai/threats/cve-2026-53847-openclaw-privilege-escalation-in-active-memory-write-scope"},{"cve":"CVE-2026-53845","cvss":4.3,"epss":0.0031,"slug":"cve-2026-53845-openclaw-hook-bypass-in-skill-command-dispatch","title":"OpenClaw hook bypass in skill-command dispatch","severity":"medium","exploited":false,"published_at":"2026-06-16T19:17:01.52+00:00","url":"https://junglewise.ai/threats/cve-2026-53845-openclaw-hook-bypass-in-skill-command-dispatch"},{"cve":"CVE-2026-53844","cvss":6.5,"epss":0.0036,"slug":"cve-2026-53844-openclaw-session-visibility-check-bypass-in-shared-memory-search","title":"OpenClaw session visibility check bypass in shared memory search","severity":"medium","exploited":false,"published_at":"2026-06-16T19:17:01.39+00:00","url":"https://junglewise.ai/threats/cve-2026-53844-openclaw-session-visibility-check-bypass-in-shared-memory-search"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"flowise (npm)","slug":"flowise","vulnerabilities":133,"url":"https://junglewise.ai/threats/technologies/flowise"},{"name":"parse-server (npm)","slug":"parse-server","vulnerabilities":117,"url":"https://junglewise.ai/threats/technologies/parse-server"},{"name":"vm2 (npm)","slug":"vm2","vulnerabilities":111,"url":"https://junglewise.ai/threats/technologies/vm2"},{"name":"electron (npm)","slug":"electron","vulnerabilities":77,"url":"https://junglewise.ai/threats/technologies/electron"},{"name":"ghost (npm)","slug":"ghost","vulnerabilities":74,"url":"https://junglewise.ai/threats/technologies/ghost"},{"name":"n8n (npm)","slug":"npm-n8n","vulnerabilities":64,"url":"https://junglewise.ai/threats/technologies/npm-n8n"},{"name":"hono (npm)","slug":"hono","vulnerabilities":62,"url":"https://junglewise.ai/threats/technologies/hono"},{"name":"directus (npm)","slug":"directus","vulnerabilities":61,"url":"https://junglewise.ai/threats/technologies/directus"},{"name":"nocodb (npm)","slug":"nocodb","vulnerabilities":54,"url":"https://junglewise.ai/threats/technologies/nocodb"},{"name":"undici (npm)","slug":"undici","vulnerabilities":53,"url":"https://junglewise.ai/threats/technologies/undici"},{"name":"@budibase/server (npm)","slug":"budibase-server","vulnerabilities":42,"url":"https://junglewise.ai/threats/technologies/budibase-server"},{"name":"apostrophe (npm)","slug":"apostrophe","vulnerabilities":36,"url":"https://junglewise.ai/threats/technologies/apostrophe"}],"technology":{"hub":true,"name":"openclaw (npm)","slug":"npm-openclaw","vendor":{"hub":true,"name":"npm","slug":"npm","url":"https://junglewise.ai/threats/vendors/npm"},"aliases":[],"url":"https://junglewise.ai/threats/technologies/npm-openclaw"},"most_severe":[{"cve":"CVE-2026-33579","cvss":9.9,"epss":0.0051,"slug":"cve-2026-33579-openclaw-privilege-escalation-in-device-pairing-approval","title":"OpenClaw privilege escalation in device pairing approval","severity":"critical","exploited":false,"published_at":"2026-03-31T15:16:14.96+00:00","url":"https://junglewise.ai/threats/cve-2026-33579-openclaw-privilege-escalation-in-device-pairing-approval"},{"cve":"CVE-2026-32917","cvss":9.8,"epss":0.032,"slug":"cve-2026-32917-openclaw-remote-command-injection-in-imessage-attachment-staging","title":"OpenClaw remote command injection in iMessage attachment staging","severity":"critical","exploited":false,"published_at":"2026-03-31T12:16:28.487+00:00","url":"https://junglewise.ai/threats/cve-2026-32917-openclaw-remote-command-injection-in-imessage-attachment-staging"},{"cve":"CVE-2026-53838","cvss":9.8,"epss":0.0037,"slug":"cve-2026-53838-openclaw-state-mutation-in-node-pairing-reconnection","title":"OpenClaw state mutation in node pairing reconnection","severity":"critical","exploited":false,"published_at":"2026-06-12T22:16:55.723+00:00","url":"https://junglewise.ai/threats/cve-2026-53838-openclaw-state-mutation-in-node-pairing-reconnection"},{"cve":"CVE-2026-44112","cvss":9.6,"epss":0.0039,"slug":"cve-2026-44112-openclaw-openclaw-toctou-race-condition-in-openshell-fs-bridge","title":"OpenClaw TOCTOU race condition in OpenShell sandbox filesystem writes","severity":"critical","exploited":false,"published_at":"2026-05-06T20:16:35.057+00:00","url":"https://junglewise.ai/threats/cve-2026-44112-openclaw-openclaw-toctou-race-condition-in-openshell-fs-bridge"},{"cve":"CVE-2026-43581","cvss":9.6,"epss":0.0021,"slug":"cve-2026-43581-openclaw-sandbox-browser-cdp-relay-network-exposure","title":"OpenClaw sandbox browser CDP relay network exposure","severity":"critical","exploited":false,"published_at":"2026-05-06T20:16:33.92+00:00","url":"https://junglewise.ai/threats/cve-2026-43581-openclaw-sandbox-browser-cdp-relay-network-exposure"},{"cve":"CVE-2026-32916","cvss":9.4,"epss":0.0063,"slug":"cve-2026-32916-openclaw-authorization-bypass-in-plugin-subagent-routes","title":"OpenClaw authorization bypass in plugin subagent routes","severity":"critical","exploited":false,"published_at":"2026-03-31T12:16:28.197+00:00","url":"https://junglewise.ai/threats/cve-2026-32916-openclaw-authorization-bypass-in-plugin-subagent-routes"},{"cve":"CVE-2026-35663","cvss":8.8,"epss":0.0052,"slug":"cve-2026-35663-openclaw-privilege-escalation-in-gateway-backend-reconnect","title":"OpenClaw privilege escalation in gateway backend reconnect","severity":"critical","exploited":false,"published_at":"2026-04-10T17:17:08.047+00:00","url":"https://junglewise.ai/threats/cve-2026-35663-openclaw-privilege-escalation-in-gateway-backend-reconnect"},{"cve":"CVE-2026-35639","cvss":4,"epss":0.0084,"slug":"cve-2026-35639-openclaw-gateway-privilege-escalation-in-device-pair-approve","title":"OpenClaw Gateway privilege escalation in device.pair.approve","severity":"critical","exploited":false,"published_at":"2026-03-26T21:40:57+00:00","url":"https://junglewise.ai/threats/cve-2026-35639-openclaw-gateway-privilege-escalation-in-device-pair-approve"},{"cve":"CVE-2026-45006","cvss":8.8,"epss":0.0093,"slug":"cve-2026-45006-openclaw-improper-access-control-in-gateway-tool-config","title":"OpenClaw improper access control in gateway tool config operations","severity":"high","exploited":false,"published_at":"2026-05-11T18:16:40.98+00:00","url":"https://junglewise.ai/threats/cve-2026-45006-openclaw-improper-access-control-in-gateway-tool-config"},{"cve":"CVE-2026-53836","cvss":8.8,"epss":0.0082,"slug":"cve-2026-53836-openclaw-allowlist-bypass-in-powershell-encoded-command-handling","title":"OpenClaw allowlist bypass in PowerShell encoded-command handling","severity":"high","exploited":false,"published_at":"2026-06-12T22:16:55.413+00:00","url":"https://junglewise.ai/threats/cve-2026-53836-openclaw-allowlist-bypass-in-powershell-encoded-command-handling"}],"generated_at":"2026-11-13T03:07:00.155039+00:00"}