目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1359 元

100%
请我们喝杯咖啡

OpenClaw 厂商漏洞列表 / CVE 中文分析 672

OpenClaw 厂商相关 672 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

OpenClaw 是一款开源的 AI 代理框架，旨在通过自然语言指令自动化执行复杂任务与系统交互。其核心架构涉及代码生成、文件操作及网络请求，历史上常见漏洞包括远程代码执行（RCE）、路径遍历及越权访问，累计已收录 428 条 CVE。由于该框架赋予 AI 较高的系统权限，若配置不当或提示词注入防护不足，极易导致数据泄露或恶意命令执行。开发者需严格限制其运行沙箱并实施最小权限原则，以缓解潜在的安全风险。

Top products by OpenClaw: OpenClaw OpenClaw Windows Node crabbox clawhub msteams feishu ClawScan voice-call discord slack nextcloud-talk OpenClaw iOS diagnostics-prometheus matrix line whatsapp
CVE ID 标题 CVSS 风险等级 Published
CVE-2026-110689 OpenClaw ClawScan runner.go shouldSkipTargetPath保护机制缺陷 — ClawScan CWE-693 5.3 Medium 2026-10-14
CVE-2026-101884 OpenClaw Windows Node 2026.7.1前远程代码执行漏洞 — OpenClaw Windows Node CWE-184 7.5 High 2026-09-30
CVE-2026-101883 OpenClaw Windows Node 2026.9.4 SSRF漏洞 — OpenClaw Windows Node CWE-918 5.4 Medium 2026-09-30
CVE-2026-101882 OpenClaw Windows Node 2026.7.1前远程代码执行漏洞 — OpenClaw Windows Node CWE-184 8.8 High 2026-09-30
CVE-2026-101881 OpenClaw Windows Node 2026.7.1前拒绝服务漏洞 — OpenClaw Windows Node CWE-770 6.5 Medium 2026-09-30
CVE-2026-101880 OpenClaw Windows Node 2026.7.1前授权绕过漏洞 — OpenClaw Windows Node CWE-863 8.8 High 2026-09-30
CVE-2026-101879 OpenClaw Windows Node 2026.7.1-3前缺失授权漏洞 — OpenClaw Windows Node CWE-862 6.5 Medium 2026-09-30
CVE-2026-102806 OpenClaw 2026.9.5 前沙箱隔离绕过 — OpenClaw CWE-863 6.3 Medium 2026-09-29
CVE-2026-102807 OpenClaw 2026.9.4 之前 MCP 应用授权绕过漏洞 — OpenClaw CWE-863 5.3 Medium 2026-09-29
CVE-2026-100604 ClawHub 通过前发布者技能控制绕过身份验证 — clawhub CWE-863 5.4 Medium 2026-09-26
CVE-2026-100603 ClawHub 技能隐藏漏洞 — clawhub CWE-799 5.4 Medium 2026-09-26
CVE-2026-100602 ClawHub 变更预览越权信息泄露漏洞 — clawhub CWE-862 6.5 Medium 2026-09-26
CVE-2026-100601 ClawHub SSRF漏洞：未检查DNS解析 — clawhub CWE-918 5.3 Medium 2026-09-26
CVE-2026-100600 ClawHub 配额耗尽漏洞 — clawhub CWE-770 5.3 Medium 2026-09-26
CVE-2026-100599 OpenClaw 2026.5.1-2026.7.1 远程代码执行漏洞 — OpenClaw CWE-78 8.8 High 2026-09-26
CVE-2026-100597 OpenClaw 小于 2026.7.1 文件系统竞争路径遍历漏洞 — OpenClaw CWE-367 7.8 High 2026-09-26
CVE-2026-100598 OpenClaw 审批绑定逻辑漏洞 — OpenClaw CWE-346 7.1 High 2026-09-26
CVE-2026-100596 OpenClaw授权绕过漏洞 — OpenClaw CWE-862 8.8 High 2026-09-26
CVE-2026-100594 OpenClaw 授权绕过漏洞 — OpenClaw CWE-200 6.5 Medium 2026-09-26
CVE-2026-100595 OpenClaw 诊断功能授权绕过漏洞 — OpenClaw CWE-200 6.5 Medium 2026-09-26
CVE-2026-100593 OpenClaw 2026.7.1之前 通过激活绕过认证的漏洞 — OpenClaw CWE-862 5.4 Medium 2026-09-26
CVE-2026-100591 OpenClaw 2026.7.1 前通过活动内存绕过身份验证漏洞 — OpenClaw CWE-862 6.3 Medium 2026-09-26
CVE-2026-100592 OpenClaw 2026.7.1前认证绕过漏洞 — OpenClaw CWE-862 6.3 Medium 2026-09-26
CVE-2026-100590 OpenClaw 授权绕过漏洞 — OpenClaw CWE-863 4.3 Medium 2026-09-26
CVE-2026-100588 OpenClaw <2026.7.1 node.invoke身份绕过漏洞 — OpenClaw CWE-863 8.3 High 2026-09-26
CVE-2026-100589 OpenClaw 沙箱绕过漏洞 — OpenClaw CWE-863 8.3 High 2026-09-26
CVE-2026-100587 OpenClaw 授权绕过漏洞 — OpenClaw CWE-862 8.8 High 2026-09-26
CVE-2026-100585 OpenClaw 2026.7.1之前 认证绕过漏洞 — OpenClaw CWE-862 8.0 High 2026-09-26
CVE-2026-100586 OpenClaw Codex 2026.7.1 前绑定授权绕过漏洞 — OpenClaw CWE-269 8.8 High 2026-09-26
CVE-2026-100584 OpenClaw 允许列表绕过漏洞（工作区阴影） — OpenClaw CWE-426 6.7 Medium 2026-09-26

本页汇总了 OpenClaw 厂商截至目前公开的全部 672 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。