OpenClaw

Exploited or KEV-listed · 4

Records at severity 3–4 (exploitation confirmed by CISA, the vendor or reporting) and records flagged as listed in CISA KEV. The KEV flag is the classifier’s cisa-kev tag or a source on the KEV catalog; it is recorded when the collector sees the listing, so a missing flag does not mean a CVE is absent from the catalog.

1. closed
   Hermes Multi-Agent Framework Compromises Taiwanese Government Systems

   Exploited · since 1 Jul 2026

   AI
2. closed
   Hermes Suspected Hackers Used AI Agents to Compromise Taiwanese Systems

   Real loss · since 1 Jul 2026

   AI
3. closed
   OpenClaw Exposed ClawdBot Control Interfaces Lead to Credential Access

   Exploited · since 25 Jan 2026

   AI
4. closed
   OpenClaw Malicious OpenClaw Skills Distribute AMOS Stealer via ClawHub

   Exploited · since 1 Feb 2026

   AI

Disclosed CVEs, no confirmed exploitation · 1

1. closed8.6
   OpenClaw CVE-2026-100585: OpenClaw bypasses owner-only authorization for Claude Code prompts

   Disclosed · since 26 Sep 2026 · CVE-2026-100585

   AI

Other incidents: research and unexploited reports · 6

1. closed
   OpenClaw Scope-Gap Injection: Exploiting Evaluator Blind Spots in OpenClaw

   Research · since 27 Oct 2026

   AI
2. closed
   OpenClaw Empirical Study of Security Concerns in OpenClaw Agentic Systems

   Research · since 27 Oct 2026

   AI
3. closed
   OpenClaw AutoRedClaw: Automated Red-Teaming for Persistent Claw-Style Agents

   Research · since 21 Oct 2026

   AI
4. closed
   OpenClaw Authorization-Grounded Workflow Attacks on Tool-Using Agents

   Research · since 19 Oct 2026

   AI
5. closed8.8
   OpenClaw OpenClaw Remote Code Execution Vulnerability Demonstrated

   Research · since 1 Feb 2026 · CVE-2026-25253

   AI
6. closed
   OpenClaw OpenClaw Command and Control via Indirect Prompt Injection

   Research · since 3 Feb 2026

   AI