OpenClaw AI assistant vulnerabilities

CERT-Bund has issued a security advisory (WID-SEC-2026-0884) concerning multiple critical vulnerabilities in the OpenClaw AI assistant, affecting versions up to 2026.3.24. The vulnerabilities, rated with a high CVSS base score of 8.8, allow attackers to gain extended privileges (including administrator rights), execute arbitrary code, bypass security measures, manipulate data, disclose confidential information, and cause denial-of-service conditions.

Users of OpenClaw, particularly those running it on UNIX-like operating systems, are advised to update to a patched version as soon as it becomes available. While no specific mitigation is provided, the advisory implies that applying updates will resolve these critical security issues. Failure to address these vulnerabilities could lead to significant data breaches and system compromise.