OpenClaw Multiple Critical Vulnerabilities CVSS 9.8

CERT-Bund published a critical security advisory identifying multiple severe vulnerabilities in OpenClaw, an open-source personal AI assistant software. The vulnerabilities carry a CVSS Base Score of 9.8 (critical severity) and a Temporal Score of 8.5 (high). Affected version is OpenClaw prior to version 2026.4.15. The advisory confirms remote attack is possible, meaning no local access is required for exploitation.

Organizations running or deploying OpenClaw should immediately assess whether they are using affected versions (prior to 2026.4.15) and apply available mitigation measures. Security teams should prioritize patching or implement compensating controls given the critical CVSS score, remote exploitability, and the breadth of potential impacts including arbitrary code execution and privilege escalation.