OpenClaw (also known as Moltbot or Clawdbot) is a self-hosted personal AI assistant that integrates with various messaging platforms and mobile or desktop operating systems to provide voice and text interactions. The architecture separates the control plane from the assistant, allowing users to host the technology on their own devices while utilizing live canvas rendering.

OpenClaw (formerly Moltbot or Clawdbot)

## Summary
  OpenClaw’s browser control API accepted user-supplied output paths for trace/download files without consistently
  constraining writes to OpenClaw-managed temporary directories.
  ## Impact
  If an attacker can access the browser control API, they could attempt to write trace/download output files outside
  intended temp roots, depending on process filesystem permissions.
  ## Affected versions
  `openclaw` `< 2026.2.13`
  ## Fixed versions
  `openclaw` `>= 2026.2.13`
  ## Remediation
  Upgrade to `2026.2.13` or later.
  ## What changed
  The fix constrains output paths for:
  - `POST /trace/stop`
  - `POST /wait/download`
  - `POST /download`
  All three now enforce OpenClaw temp-root boundaries and reject traversal/escape paths.
  ## Credits
  Thanks to Adnan Jakati (@jackhax) of Praetorian for responsible disclosure.
  Fix shipped in PR #15652 and merged to `main` on February 13, 2026 (`7f0489e4731c8d965d78d6eac4a60312e46a9426`).
---
Fix commit 7f0489e4731c8d965d78d6eac4a60312e46a9426 confirmed on main and in v2026.2.14. Upgrade to `openclaw >= 2026.2.13`.

CVE ID	Severity	Score	Technologies	Component name	CISA KEV exploit	Has fix	Published date
CVE-2026-48063	CRITICAL	9.3	JavaScript	openclaw	No	Yes	Aug 03, 2026
CVE-2026-45623	CRITICAL	9.1	JavaScript	keep-fips	No	Yes	Jul 27, 2026
CVE-2026-16633	HIGH	8.6	JavaScript	openclaw	No	Yes	Aug 06, 2026
CVE-2026-62229	HIGH	7.7	OpenClaw (formerly Moltbot or Clawdbot)	openclaw	No	Yes	Jul 17, 2026
CVE-2026-62228	HIGH	7.7	OpenClaw (formerly Moltbot or Clawdbot)	openclaw	No	Yes	Jul 17, 2026

GHSA-gq9c-wg68-gwj2:
OpenClaw (formerly Moltbot or Clawdbot) vulnerability analysis and mitigation

Summary

Impact

Affected versions

Fixed versions

Remediation

What changed

Credits

Thanks to Adnan Jakati (@jackhax) of Praetorian for responsible disclosure. Fix shipped in PR #15652 and merged to `main` on February 13, 2026 (`7f0489e4731c8d965d78d6eac4a60312e46a9426`).

8.7

Related OpenClaw (formerly Moltbot or Clawdbot) vulnerabilities:

Benchmark your Cloud Security Posture

Additional Wiz resources

Cloud Vulnerability DB

Cloud Threat Landscape

PEACH

Ready to see Wiz in action?

GHSA-gq9c-wg68-gwj2: OpenClaw (formerly Moltbot or Clawdbot) vulnerability analysis and mitigation