Skip to content
OpenClaw Vulnerabilities Enable Host-Level Attacks

OpenClaw Vulnerabilities Enable Host-Level Attacks

First seen 21 Oct 2026, 13:17 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 22, 2026 at 13:13 UTC
  • •OpenClaw has critical vulnerabilities allowing host-level persistence.
  • •CVE-2026-44112 has a CVSS score of 9.6, enabling severe exploitation.
  • •Approximately 245,000 OpenClaw instances are publicly accessible, increasing risk.

OpenClaw, an open-source AI agent, has multiple vulnerabilities that allow attackers to escalate privileges and maintain persistence on affected hosts. Key vulnerabilities include CVE-2026-44112, which has a CVSS score of 9.6, enabling filesystem redirection outside the sandbox. Scans show approximately 245,000 publicly accessible OpenClaw instances, significantly increasing the attack surface. The vulnerabilities were disclosed on April 22, 2026, with patches released the next day. Attackers can exploit these flaws to mimic normal agent behavior, complicating detection efforts. Organizations using OpenClaw versions prior to 2026.4.22 should consider their deployments unpatched and take immediate action. The attack vector involves chaining vulnerabilities to bypass security measures and achieve host-level access.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 3h ago How this analysis works

Timeline

2025-11-16
Public exploit for CVE-2026-25253 released
A proof-of-concept exploit appeared on GitHub, lowering the barrier for opportunistic attackers.
GitHub
2026-04-22
Vulnerabilities disclosed to OpenClaw maintainers
Four critical vulnerabilities were reported, leading to potential host-level exploitation.
labs.cloudsecurityalliance.org
2026-04-23
Patches released for OpenClaw vulnerabilities
Patches for the disclosed vulnerabilities were made available to users the day after disclosure.
labs.cloudsecurityalliance.org
2026-05-06
CVE-2026-44112 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-05-06
CVE-2026-44113 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-05-06
CVE-2026-44115 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-05-06
CVE-2026-44118 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-21
OpenClaw vulnerabilities detailed in security articles
Recent articles highlight the risks associated with OpenClaw, including its widespread adoption and vulnerabilities.
Sentinelone

More articles in this cluster (5)

Following this threat?

Track ClawHavoc and CVE-2026-25253 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (16)

1 / 4

Common questions

Which versions of OpenClaw are affected?
All OpenClaw releases prior to version 2026.4.22 are considered unpatched and vulnerable.
What is the severity of the vulnerabilities?
The highest severity vulnerability, CVE-2026-44112, has a CVSS score of 9.6, indicating a critical risk.
What actions should organizations take?
Organizations should apply the latest patches immediately and monitor for any unusual behavior in their OpenClaw instances.