OpenClaw Vulnerabilities

CERT-Bund has released a critical security advisory (WID-SEC-2026-0856) concerning multiple vulnerabilities in OpenClaw, a personal AI assistant software. The vulnerabilities carry a CVSS Base Score of 9.9 and a Temporal Score of 8.6, indicating a high risk. Exploitation allows remote attackers to execute arbitrary code, gain administrator privileges, manipulate data, bypass security measures, disclose confidential information, or cause denial-of-service conditions.

Users of OpenClaw, particularly those running versions prior to 2026.3.22 on Linux or UNIX operating systems, are strongly advised to apply the available mitigation. Failure to do so could result in severe security breaches, including complete system compromise. The advisory indicates that a mitigation is available, and users should consult the provided links for specific instructions and version history.