OpenClaw Multiple Critical Vulnerabilities Allow Remote Code Execution

CERT-Bund published a security advisory detailing multiple critical vulnerabilities in OpenClaw, a personal AI assistant. The vulnerabilities carry a CVSS Base Score of 8.8 (high), indicating severe risk. Attackers can exploit these flaws to gain administrator privileges, execute arbitrary code remotely, bypass security mechanisms, and disclose or manipulate data. The affected product is Open Source OpenClaw prior to version 2026.3.25.

Organizations and individuals using OpenClaw should immediately apply available mitigations and upgrade to version 2026.3.25 or later. Given the remote attack vector and potential for complete system compromise, affected parties should treat this as a priority security update. System administrators should monitor for indicators of exploitation and ensure补丁 management processes address this vulnerability class.