Four New High-Severity OpenClaw CVEs Disclosed in April 2026: Gateway Privilege Escalation, Sandbox Escape, SSRF

OpenClaw's gateway plugin HTTP routes have a class of vulnerabilities where authenticated callers can escalate to operator.admin scope regardless of their actual permissions (CVE-2026-35669, CVSS 8.8), and sandboxed agents can read arbitrary files across workspaces through unnormalized path parameters (CVE-2026-35668). With 135K+ OpenClaw instances publicly exposed and six new HIGH-severity CVEs disclosed in April 2026 alone, a standalone reverse proxy that sits in front of the gateway and validates every plugin route call against the caller's granted scopes, while normalizing all file path parameters including mediaUrl and fileUrl aliases, would close these attack vectors without waiting for upstream patches.

OpenClaw shipped 9 CVEs in 4 days (March 2026) including a CVSS 9.9 privilege escalation affecting 135K+ exposed instances. Most operators have no way to know which CVEs affect their version, no automated patching, and no coordination between the flood of advisories (156+ total) and their actual attack surface. This tool continuously monitors CVE feeds, maps each advisory to your installed version and enabled features, and applies safe mitigations automatically while queuing risky patches for human approval.

139 security advisories in 63 days means OpenClaw operators face 2.2 new CVEs daily. 41% are rated High or Critical. ClawSec (894 stars) monitors for known threats and polls NVD, but every advisory is presented equally regardless of whether it applies to your setup. Operators running Telegram-only agents waste time triaging Slack channel CVEs that cannot affect them. This service fingerprints your exact deployment (version, channels, skills, network bindings) and scores each incoming CVE on actual exploitability in your environment, so your remediation queue contains only what matters.