OpenClaw vulnerabilities: known CVEs & security history
OpenClaw · AI / LLM Gateway · 119 tracked CVEs · 0 actively exploited · updated August 2026 · what is a CVE? →
This is the full list of known vulnerabilities (CVEs) across all OpenClaw release lines — 119 in total. A CVE here doesn't mean your version is affected — check OpenClaw's current status and the safe version to run.
Known OpenClaw CVEs
Actively-exploited and most-severe first. Showing the top 80 of 119. Open any CVE for full details.
| CVE | Severity | CVSS | EPSS | Year |
|---|---|---|---|---|
| CVE-2026-33579 | critical | 9.9 | 1% | 2026 |
| CVE-2026-53838 | critical | 9.8 | 0% | 2026 |
| CVE-2026-32917 | critical | 9.8 | 2% | 2026 |
| CVE-2026-32916 | critical | 9.4 | 0% | 2026 |
| CVE-2026-62229 | high | 8.8 | 0% | 2026 |
| CVE-2026-62228 | high | 8.8 | 0% | 2026 |
| CVE-2026-62223 | high | 8.8 | 0% | 2026 |
| CVE-2026-62218 | high | 8.8 | 0% | 2026 |
| CVE-2026-62217 | high | 8.8 | 0% | 2026 |
| CVE-2026-62207 | high | 8.8 | 0% | 2026 |
| CVE-2026-62203 | high | 8.8 | 0% | 2026 |
| CVE-2026-62202 | high | 8.8 | 0% | 2026 |
| CVE-2026-62200 | high | 8.8 | 0% | 2026 |
| CVE-2026-62199 | high | 8.8 | 0% | 2026 |
| CVE-2026-62194 | high | 8.8 | 0% | 2026 |
| CVE-2026-62190 | high | 8.8 | 0% | 2026 |
| CVE-2026-53843 | high | 8.8 | 0% | 2026 |
| CVE-2026-53836 | high | 8.8 | 0% | 2026 |
| CVE-2026-53828 | high | 8.8 | 0% | 2026 |
| CVE-2026-53822 | high | 8.8 | 1% | 2026 |
| CVE-2026-53821 | high | 8.8 | 0% | 2026 |
| CVE-2026-35674 | high | 8.8 | 0% | 2026 |
| CVE-2026-62226 | high | 8.5 | 0% | 2026 |
| CVE-2026-62197 | high | 8.5 | 0% | 2026 |
| CVE-2026-41371 | high | 8.5 | 0% | 2026 |
| CVE-2026-32920 | high | 8.4 | 0% | 2026 |
| CVE-2026-62196 | high | 8.3 | 0% | 2026 |
| CVE-2026-62195 | high | 8.3 | 0% | 2026 |
| CVE-2026-53853 | high | 8.3 | 0% | 2026 |
| CVE-2026-53831 | high | 8.3 | 0% | 2026 |
| CVE-2026-32905 | high | 8.3 | 0% | 2026 |
| CVE-2026-34504 | high | 8.3 | 0% | 2026 |
| CVE-2026-62209 | high | 8.1 | 0% | 2026 |
| CVE-2026-62192 | high | 8.1 | 0% | 2026 |
| CVE-2026-53866 | high | 8.1 | 0% | 2026 |
| CVE-2026-53864 | high | 8.1 | 0% | 2026 |
| CVE-2026-53857 | high | 8.1 | 0% | 2026 |
| CVE-2026-53855 | high | 8.1 | 0% | 2026 |
| CVE-2026-53849 | high | 8.1 | 0% | 2026 |
| CVE-2026-53823 | high | 8.1 | 0% | 2026 |
| CVE-2026-41364 | high | 8.1 | 1% | 2026 |
| CVE-2026-34503 | high | 8.1 | 0% | 2026 |
| CVE-2026-33577 | high | 8.1 | 0% | 2026 |
| CVE-2026-62215 | high | 8 | 0% | 2026 |
| CVE-2026-53829 | high | 8 | 0% | 2026 |
| CVE-2026-35630 | high | 8 | 0% | 2026 |
| CVE-2026-62222 | high | 7.8 | 0% | 2026 |
| CVE-2026-62227 | high | 7.7 | 0% | 2026 |
| CVE-2026-62201 | high | 7.7 | 0% | 2026 |
| CVE-2026-53833 | high | 7.7 | 0% | 2026 |
| CVE-2026-53832 | high | 7.7 | 0% | 2026 |
| CVE-2026-62186 | high | 7.6 | 0% | 2026 |
| CVE-2026-34426 | high | 7.6 | 0% | 2026 |
| CVE-2026-53834 | high | 7.5 | 0% | 2026 |
| CVE-2026-32988 | high | 7.5 | 0% | 2026 |
| CVE-2026-32982 | high | 7.5 | 0% | 2026 |
| CVE-2026-62219 | high | 7.1 | 0% | 2026 |
| CVE-2026-62212 | high | 7.1 | 0% | 2026 |
| CVE-2026-62206 | high | 7.1 | 0% | 2026 |
| CVE-2026-62205 | high | 7.1 | 0% | 2026 |
| CVE-2026-62191 | high | 7.1 | 0% | 2026 |
| CVE-2026-62189 | high | 7.1 | 0% | 2026 |
| CVE-2026-59261 | high | 7.1 | 0% | 2026 |
| CVE-2026-53865 | high | 7.1 | 0% | 2026 |
| CVE-2026-53858 | high | 7.1 | 0% | 2026 |
| CVE-2026-53846 | high | 7.1 | 0% | 2026 |
| CVE-2026-53842 | high | 7.1 | 0% | 2026 |
| CVE-2026-32971 | high | 7.1 | 0% | 2026 |
| CVE-2026-53861 | medium | 6.6 | 0% | 2026 |
| CVE-2026-53820 | medium | 6.6 | 0% | 2026 |
| CVE-2026-62214 | medium | 6.5 | 0% | 2026 |
| CVE-2026-62213 | medium | 6.5 | 0% | 2026 |
| CVE-2026-62210 | medium | 6.5 | 0% | 2026 |
| CVE-2026-62208 | medium | 6.5 | 0% | 2026 |
| CVE-2026-53859 | medium | 6.5 | 0% | 2026 |
| CVE-2026-53854 | medium | 6.5 | 0% | 2026 |
| CVE-2026-53839 | medium | 6.5 | 0% | 2026 |
| CVE-2026-53830 | medium | 6.5 | 0% | 2026 |
| CVE-2026-53827 | medium | 6.5 | 0% | 2026 |
| CVE-2026-53825 | medium | 6.5 | 0% | 2026 |
39 older / lower-severity CVEs not shown — see OpenClaw's full record.
Is my OpenClaw version affected?
The list above spans every release. To know whether your version is affected — and the minimum safe version to upgrade to — check it directly.
Check your OpenClaw version → · Monitor OpenClaw for new CVEs →
OpenClaw vulnerabilities — frequently asked
How many known vulnerabilities does OpenClaw have?
IsItPatched tracks 119 CVEs for OpenClaw. 4 are critical-severity and 64 high-severity. These span every release line — what matters is whether the version you run is affected.
Does OpenClaw have any actively-exploited vulnerabilities?
None of OpenClaw's tracked CVEs are currently in CISA's KEV catalog — but new ones can be added at any time, so keep your version current.
What is the most severe OpenClaw vulnerability?
Among tracked issues, CVE-2026-33579 (CRITICAL, CVSS 9.9) ranks highest — a Incorrect authorization weakness.
Is OpenClaw safe to use?
It depends on the version. The latest supported OpenClaw release clears the known issues; older versions may still be affected. Check the exact version you run for a verdict.
CVE data aggregated from NVD, CISA KEV and EPSS (FIRST.org). Related: OpenClaw security status · OpenClaw end-of-life · actively-exploited CVEs. Always verify against OpenClaw's advisories — see our disclaimer.