p PatchFirst

PatchFirst · Latest vulnerabilities

openclaw 2026.5.12: known vulnerabilities · Page 2

Known vulnerabilities affecting openclaw 2026.5.12: 21. Compare the fixes below with your installed release.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerabilities: 21

  1. CVE-2026-35630

    High · CVSS 7.5EPSS 0.21%Fix available

    OpenClaw < 2026.5.18 - QQBot Missing Approver Identity Enforcement in Native Approval Buttons

    OpenClaw before 2026.5.18 contains an authorization bypass vulnerability in QQBot native approval buttons that fails to enforce configured approver identity. Non-approver users can click approval buttons to resolve pending exec or plugin approval requests without proper authorization.

    openclawNode.js
    • Update to 2026.5.18
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →