OpenClaw vulnerabilities: the October 2026 report
What the NVD lists for OpenClaw as of October 2026: how many vulnerabilities, how severe, which kinds come up most, and what to do about it.
By OpenClawPro. Published October 25, 2026. Updated October 25, 2026.
As of October 23, 2026, the NVD lists 685 vulnerabilities whose description names OpenClaw or its former names: 31 critical, 287 high, 337 medium and 30 low. The most recent was published on October 14, 2026. That number sounds alarming; read with the dates and the fixed versions, it mostly says that a popular project is being audited hard, and that running an old version is the real risk.
When were they published?
In waves. March 2026 saw 199 publications, including 17 critical ones, and April 174. Since September, 93 have been published, 0 of them critical and 33 high. The early-2026 wave followed the project's sudden popularity and the first serious audits.
What kinds of flaws come up most?
Grouping the NVD's weakness categories, authorisation and authentication flaws are the largest family with 301 entries, ahead of command execution and injection (109), path traversal (58) and server-side request forgery (41). Many concern optional channels and plugins, which is one more reason to install only what you use.
Which one should you know by name?
CVE-2026-25253, rated 8.80: a one-click remote code execution through a gateway URL taken from a query string. It was fixed in version 2026.1.29. It is a good example of why the gateway should never be exposed to the internet, even after the fix.
What should you do?
- Run a recent version. The latest fix version cited in the NVD descriptions is 2026.9.5; check the release notes for anything newer.
- Keep the gateway private and reach it through an SSH tunnel.
- Remove channels and plugins you do not use.
- Install only reviewed skills.
- Run our read-only audit script, which checks 12 points: github.com/Delta117-117/openclaw-hardening.
Follow the list
Our CVE tracker shows every entry with its severity and fixed version, and publishes the same data as JSON and RSS feeds that you are free to reuse with a link.