Organization/organizations/openclaw
OpenClaw
Incident records62
Aug 2026Claude AI agent discovers gym booking system vulnerability, cancels another user's reservationThe IndependentDiaspora Digital Media (DDM News) - Nigeria Breaking News, Africa and World News and Updates -The Indian Express+3Jun 2026Five malicious skills removed from OpenClaw ClawHub marketplaceUnit42Dark ReadingJun 2026OpenClaw AI agent vulnerabilities enable malicious skill packages to steal user dataenglish.news.cnChina NewsApr 2026AI Agent Exploited Gym Booking API Authorization Flaw and Removed Member From Waitlistabc.net.auaffinda.comApr 2026Open-source AI agents expose security vulnerabilities in China东方财富网China NewsApr 2026China warns of risks in using OpenClaw AI agent for patent applications驱动之家21jingji.combjnews.com.cn+4Apr 2026OpenClaw and NemoClaw AI agents exposed to critical vulnerabilitiesnews.cnithome.com.twMar 2026Ant Group AI lab finds 8 vulnerabilities in OpenClaw autonomous agent frameworkm.163.comguancha.cnET NetMar 2026AI Agents Cause Unauthorized Actions and Security Risks in EnterprisesUDNCentral News AgencyMar 2026OpenClaw and Langflow critical vulnerabilities enable authentication bypass驱动之家net.zhiding.cnET Net+1Mar 2026OpenClaw AI agents cause data breaches and mass layoffs in Chinavnexpress.netcafef.vnBáo Nhân Dân Ä‘iện tá»+5Mar 2026OpenClaw AI agent raises security and privacy concerns in ChinaBloomberg BusinessExciteGIGAZINEMar 2026China restricts OpenClaw AI agent deployment in government and state enterprisesbbc.comTradingViewO Globo+6Feb 2026OpenClaw WebSocket vulnerability allows malicious websites to hijack local AI agentsIT Security News - cybersecurity, infosecurity newsCyberwarzoneFeb 2026OpenClaw AI Agent Deletes Meta AI Director's Emails Without AuthorizationIndia Todayhindustantimes.comFeb 2026OpenClaw symlink following vulnerability in skill packaging scriptgithub.comFeb 2026OpenClaw cron webhook delivery vulnerability CVE-2026-27488github.comFeb 2026OpenClaw ACP missing prompt-size checks in stdio bridgegithub.comFeb 2026OpenClaw unauthenticated discovery TXT records could steer routing and TLS pinninggithub.comcve.orgFeb 2026Docker container escape via unvalidated bind mount injection in OpenClawgithub.comFeb 2026OpenClaw: Telegram bot token exposure via logs (CVE-2026-27003)github.comFeb 2026OpenClaw session tool visibility and Telegram webhook secret disclosuregithub.comFeb 2026OpenClaw sandbox config hash treated order-only changes as unchangedgithub.comFeb 2026OpenClaw hardened skill download target directory validationgithub.comFeb 2026Stored XSS in OpenClaw Control UI via unsanitized assistant identitygithub.comFeb 2026OpenClaw Discord moderation authorization used untrusted sender identitygithub.comFeb 2026OpenClaw Path Traversal in Browser Download Functionalitygithub.comFeb 2026OpenClaw CLI unvalidated process kill via SIGKILL in cleanupgithub.comFeb 2026Infostealer malware steals OpenClaw AI assistant configuration filesTechNaduTechRadarFeb 2026OpenClaw CSRF vulnerability in loopback browser mutation endpointsgithub.comFeb 2026OpenClaw Telnyx provider accepts unauthenticated webhook requests (CVE-2026-26319)github.comFeb 2026OpenClaw macOS deep link confirmation truncation can conceal executed agent messagegithub.comFeb 2026OpenClaw Feishu extension allows local file disclosure via sendMediaFeishugithub.comFeb 2026OpenClaw Gateway tool allowed unrestricted gatewayUrl overridegithub.comFeb 2026Command injection in OpenClaw maintainer clawtributors updatergithub.comFeb 2026OpenClaw SSRF guard bypass via IPv4-mapped IPv6 literalsgithub.comcve.orgFeb 2026OpenClaw node host system.run rawCommand/command mismatch allows allowlist bypassgithub.comFeb 2026OpenClaw skills.status could leak secrets to operator.read clientsgithub.comFeb 2026OpenClaw iMessage group allowlist authorization inherited DM pairing-store identitiesgithub.comFeb 2026Path traversal in OpenClaw browser upload allows local file readgithub.comFeb 2026OpenClaw unsanitized current working directory path injection into LLM promptsgithub.comFeb 2026OpenClaw Slack integration vulnerable to system prompt injection via channel metadatagithub.comcve.orgFeb 2026OpenClaw Telegram webhook secret validation bypass (CVE-2026-25474)github.comFeb 2026OpenClaw BlueBubbles webhook auth bypass via loopback proxy trustgithub.comFeb 2026Shell injection vulnerability in OpenClaw macOS keychain credential writegithub.comFeb 2026OpenClaw AI agents create unauthorized dating profiles without user consentFortunemintFeb 2026AI Agent Publishes Attack Article After Code RejectionArs TechnicaDecryptFast Company+3Feb 2026AI coding agent allegedly published accusatory blog post targeting Matplotlib maintainertheregister.comFeb 2026Tens of thousands of OpenClaw AI agents exposed to public internet through misconfigurationThe Korea TimesInfosecurity MagazineFeb 2026Malicious AI skills poisoned OpenClaw plugin hubCointelegraphFinanceFeeds
50 of 62 shownFilter all 62 in Explore →