CyberSIXT Search
OpenClaw product

Several products

← All OpenClaw products

No Several products CVE is in the CISA KEV catalogue.

Tracked since 2 Feb · latest article Wed 26 Aug · RSS

High exploit odds · current
1
high · not in KEV

Exploited, by due date

CSV download

No Several products CVE is in the CISA KEV catalogue.

Coverage

11 articles · all timeFull timeline →

11 articles from 6 outlets since 2 Feb; the latest 61 days ago.

Several products: coverage over time11 articles from 6 outlets. First report 2 Feb by The Hacker News. Busiest week: 2 articles, week of 18 May. 0 in the last 7 days. Several products: coverage over time11 articles from 6 outlets. First report 2 Feb by The Hacker News. Busiest week: 2 articles, week of 18 May. 0 in the last 7 days.
  • Article
  • First report
Show as table
Several products: articles
Published (UTC)OutletHeadline
Wed 26 Aug · 10:21 UTCSecurelistAI driven software surge fuels record Q2 2026 vulnerability spike
Mon 18 May · 22:11 UTCDark ReadingOpenClaw bugs enable full system takeover via chained exploits
Mon 18 May · 12:41 UTCSecurityWeek‘Claw Chain’ OpenClaw Flaws Allow Sandbox Escape, Backdoor Delivery
Fri 15 May · 16:10 UTCThe Hacker NewsOpenClaw chain lets attackers hijack config and steal data
Mon 6 Apr · 21:11 UTCdti.domaintools.comLinux Clipboard Malware Steals Crypto Payments, Researchers Warn
Fri 3 Apr · 21:01 UTCArs TechnicaOpenClaw CVE-2026-33579 flaw lets attackers hijack admin rights
Mon 2 Mar · 23:29 UTCDark ReadingOpenClaw flaw lets malicious site hijack agent CVE-2026-25253
Sat 28 Feb · 18:00 UTCThe Hacker NewsOpenClaw ClawJacked lets malicious page abuse localhost WebSocket
Thu 19 Feb · 11:20 UTCSecurityWeekOpenClaw Security Issues Continue as SecureClaw Open Source Tool Debuts
Tue 3 Feb · 13:55 UTCSecurityWeekVulnerability Allows Hackers to Hijack OpenClaw AI Assistant
Mon 2 Feb · 17:50 UTCThe Hacker NewsOpenClaw Bug Enables One-Click Remote Code Execution via Malicious Link

Who reported 6 outlets, last 12 months

  • The Hacker News3
  • SecurityWeek3
  • Dark Reading2
  • Ars Technica1
  • dti.domaintools.com1
  • Securelist1
See the full timeline
  1. AI driven software surge fuels record Q2 2026 vulnerability spikeSecurelist
  2. OpenClaw bugs enable full system takeover via chained exploitsDark Reading
  3. ‘Claw Chain’ OpenClaw Flaws Allow Sandbox Escape, Backdoor DeliverySecurityWeek
  4. OpenClaw chain lets attackers hijack config and steal dataThe Hacker News
  5. Linux Clipboard Malware Steals Crypto Payments, Researchers Warndti.domaintools.com
  6. OpenClaw CVE-2026-33579 flaw lets attackers hijack admin rightsArs Technica
  7. OpenClaw flaw lets malicious site hijack agent CVE-2026-25253Dark Reading
  8. OpenClaw ClawJacked lets malicious page abuse localhost WebSocketThe Hacker News
  9. OpenClaw Security Issues Continue as SecureClaw Open Source Tool DebutsSecurityWeek
  10. Vulnerability Allows Hackers to Hijack OpenClaw AI AssistantSecurityWeek

All CVEs in coverage

11
CVE-2026-25253OpenClaw vulnerabilityCVSS8.8High–Not in KEV24%EPSS5articles
CVE-2026-44112OpenClaw vulnerabilityCVSS9.6Critical–Not in KEV7.3%EPSS3articles
CVE-2026-25157OpenClaw/Clawdbot has OS Command Injection via Project Root Path in sshNodeCommandCVSSUnrated–Not in KEV1.1%EPSS2articles
CVE-2026-25475OpenClaw Vulnerable to Local File Inclusion via MEDIA: Path ExtractionCVSSUnrated–Not in KEV0.8%EPSS1article
CVE-2026-33579OpenClaw vulnerabilityCVSS8.6High–Not in KEV0.8%EPSS2articles
CVE-2026-25593OpenClaw Affected by Unauthenticated Local RCE via WebSocket config.applyCVSSUnrated–Not in KEV0.7%EPSS1article
CVE-2026-44115OpenClaw vulnerabilityCVSS8.8High–Not in KEV0.4%EPSS3articles
CVE-2026-26322OpenClaw Gateway tool allowed unrestricted gatewayUrl overrideCVSSUnrated–Not in KEV0.4%EPSS1article
CVE-2026-26319OpenClaw has Missing Webhook Authentication in Telnyx Provider Allowing Unauthenticated RequestsCVSSUnrated–Not in KEV0.3%EPSS1article
CVE-2026-44113OpenClaw vulnerabilityCVSS8.3High–Not in KEV0.3%EPSS3articles
CVE-2026-44118OpenClaw vulnerabilityCVSS8.5High–Not in KEV0.1%EPSS3articles
How these numbers are made

CISA KEV counts use the full catalogue, refreshed every 10 minutes. CVEs in coverage are those recorded by CyberSIXT. BOD 22-01 deadlines bind US federal civilian agencies.

CVEs with FIRST EPSS at or above the 95th percentile (top 5%), excluding CVEs in CISA KEV. EPSS estimates exploitation probability over the next 30 days.

Coverage is above its usual rate at three or more articles in 7 days and at least 2.5 times the weekly mean of the preceding 8 weeks.

Product names are grouped by normalised names, with version and edition tails removed.

Fix listed refers to an advisory. Unknown fix status is counted as not listed.

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.
↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device