OpenClaw Vulnerabilities Allow Code Execution and Privilege Escalation

CERT-Bund has released a critical security advisory (WID-SEC-2026-0727) detailing multiple severe vulnerabilities in OpenClaw, a personal AI assistant software. The vulnerabilities, rated with a CVSS Base Score of 9.9, can be exploited by attackers to achieve arbitrary code execution, gain administrator privileges, manipulate data, bypass security measures, disclose confidential information, and cause denial-of-service conditions. The affected product is Open Source OpenClaw version prior to 2026.3.13.

Users of OpenClaw are strongly advised to update to a patched version or apply available mitigations immediately to prevent exploitation. Failure to address these vulnerabilities could lead to significant security breaches, including complete system compromise. The advisory highlights the urgent need for users to assess their exposure and implement necessary security controls to protect their devices and data.