CVE-2026-32040Medium· 4.6▾ SunlitOpenClaw versions prior to 2026.2.23 contain an html injection vulnerability in the HTML session exporter that allows attackers to execute arbitrary javascript by injecting malicious mimeType values in image content blocks. Attackers can…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 25.3 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.2%
OpenClaw versions prior to 2026.2.23 contain an html injection vulnerability in the HTML session exporter that allows attackers to execute arbitrary javascript by injecting malicious mimeType values in image content blocks. Attackers can craft session entries with specially crafted mimeType attributes that break out of the img src data-URL context to achieve cross-site scripting when exported HTML is opened.
OpenClaw < 2026.2.23Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-53841Medium· 6.1OpenClaw: Exported session HTML could keep unsafe markdown links
CVE-2026-22177Medium· 6.1OpenClaw < 2026.2.21 - Environment Variable Injection via Config env.vars
CVE-2026-32038Critical· 9.8OpenClaw - Sandbox Network Isolation Bypass via docker.network=container Parameter
CVE-2026-34425Medium· 5.4OpenClaw - Shell-Bleed Protection Preflight Validation Bypass
CVE-2026-34426High· 7.6OpenClaw - Approval Bypass via Environment Variable Normalization
CVE-2026-62214Medium· 6.5OpenClaw versions before 2026.5.28 Bot Framework contains an improper input validation vulnerability that allows lower-trust callers to expose bot tokens and credentials by failing to properly validate serviceUrl parameters