{"id":"EUVD-2026-13964","enisaUuid":"7265595c-8408-380c-a3e9-39636aace3fd","description":"OpenClaw versions prior to 2026.2.21 sandbox browser entrypoint launches x11vnc without authentication for noVNC observer sessions, allowing unauthenticated access to the VNC interface. Remote attackers on the host loopback interface can connect to the exposed noVNC port to observe or interact with the sandbox browser without credentials.","datePublished":"Mar 21, 2026, 12:42:29 AM","dateUpdated":"Oct 8, 2026, 3:22:23 PM","baseScore":8.5,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","references":"https://github.com/openclaw/openclaw/security/advisories/GHSA-25gx-x37c-7pph\nhttps://github.com/openclaw/openclaw/commit/621d8e1312482f122f18c43c72c67211b141da01\nhttps://github.com/openclaw/openclaw/commit/8c1518f0f3e0533593cd2dec3a46c9b746753661\nhttps://www.vulncheck.com/advisories/openclaw-missing-vnc-authentication-in-sandbox-browser-novnc-observer\n","aliases":"CVE-2026-32064\nGHSA-cxcw-jm67-3wwp\n","assigner":"VulnCheck","epss":0.52,"enisaIdProduct":[{"id":"2c47a485-714f-3383-b0f1-c83da849a56f","product":{"name":"OpenClaw","vendor":{"name":"n/a"}},"product_version":"0 \u003c2026.2.21"}],"enisaIdVendor":[{"id":"001ea21f-d0a4-3920-955a-0ed12b714073","vendor":{"name":"OpenClaw"}}],"enisaIdVulnerability":[{"id":"4a5c2dac-88ed-36d0-a33a-d8ee063ca211","vulnerability":{"id":"GHSA-25gx-x37c-7pph","description":"OpenClaw\u0027s andbox browser noVNC observer lacked VNC authentication","datePublished":"Mar 3, 2026, 7:17:48 PM","dateUpdated":"Mar 30, 2026, 1:43:24 PM","baseScore":0.0,"references":"https://github.com/openclaw/openclaw/security/advisories/GHSA-25gx-x37c-7pph\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-32064\nhttps://github.com/openclaw/openclaw/commit/621d8e1312482f122f18c43c72c67211b141da01\nhttps://github.com/openclaw/openclaw/commit/8c1518f0f3e0533593cd2dec3a46c9b746753661\nhttps://github.com/openclaw/openclaw\nhttps://www.vulncheck.com/advisories/openclaw-missing-vnc-authentication-in-sandbox-browser-novnc-observer\n","enisa_id":"EUVD-2026-13964\n","aliases":"CVE-2026-32064\nGHSA-25gx-x37c-7pph\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 1:58:18 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"637d307b-c8f1-3bb1-86a9-0013ecc947f9","vulnerability":{"id":"CVE-2026-32064","description":"OpenClaw versions prior to 2026.2.21 sandbox browser entrypoint launches x11vnc without authentication for noVNC observer sessions, allowing unauthenticated access to the VNC interface. Remote attackers on the host loopback interface can connect to the exposed noVNC port to observe or interact with the sandbox browser without credentials.","datePublished":"Mar 21, 2026, 12:42:29 AM","dateUpdated":"Oct 8, 2026, 3:22:23 PM","status":"PUBLISHED","baseScore":8.5,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","references":"https://github.com/openclaw/openclaw/security/advisories/GHSA-25gx-x37c-7pph\nhttps://github.com/openclaw/openclaw/commit/621d8e1312482f122f18c43c72c67211b141da01\nhttps://github.com/openclaw/openclaw/commit/8c1518f0f3e0533593cd2dec3a46c9b746753661\nhttps://www.vulncheck.com/advisories/openclaw-missing-vnc-authentication-in-sandbox-browser-novnc-observer\n","enisa_id":"EUVD-2026-13964\n","assigner":"VulnCheck","epss":0.52,"dataProcessed":"Nov 5, 2026, 7:18:42 AM","vulnerabilityProduct":[{"id":"c6ab5ac4-85cd-39c8-b4ef-eca44488c17f","product":{"name":"OpenClaw","vendor":{"name":"n/a"}},"product_version":"0 \u003c2026.2.21"}],"vulnerabilityVendor":[{"id":"b3d7640e-f0b9-37ff-9b96-818d88154847","vendor":{"name":"OpenClaw"}}]}},{"id":"a9a06b96-6199-3857-9954-b6900a4b2909","vulnerability":{"id":"GHSA-cxcw-jm67-3wwp","description":"Duplicate Advisory: OpenClaw\u0027s andbox browser noVNC observer lacked VNC authentication","datePublished":"Mar 21, 2026, 3:31:14 AM","dateUpdated":"Mar 24, 2026, 7:06:52 PM","baseScore":0.0,"references":"https://github.com/openclaw/openclaw/security/advisories/GHSA-25gx-x37c-7pph\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-32064\nhttps://github.com/openclaw/openclaw/commit/621d8e1312482f122f18c43c72c67211b141da01\nhttps://github.com/openclaw/openclaw/commit/8c1518f0f3e0533593cd2dec3a46c9b746753661\nhttps://www.vulncheck.com/advisories/openclaw-missing-vnc-authentication-in-sandbox-browser-novnc-observer\n","enisa_id":"EUVD-2026-13964\n","aliases":"GHSA-cxcw-jm67-3wwp\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 1:58:58 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[{"id":"f62af7bc-4cf4-36a4-839c-b0465d921de8","advisory":{"id":"WID-SEC-W-2026-0472","description":"OpenClaw: Mehrere Schwachstellen","summary":"Ein Angreifer kann mehrere Schwachstellen in OpenClaw ausnutzen, um beliebigen Programmcode auszuführen, sich erhöhte Berechtigungen zu verschaffen, Daten zu manipulieren, einen Denial-of-Service-Zustand auszulösen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen oder andere nicht näher spezifizierte Angriffe durchzuführen.","datePublished":"Feb 22, 2026, 11:00:00 PM","dateUpdated":"Apr 12, 2026, 10:00:00 PM","baseScore":0.0,"references":"https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0472.json\nhttps://wid.cert-bund.de/portal/wid/securityadvisory?name\u003dWID-SEC-2026-0472\n","aliases":"CVE-2026-22168\nCVE-2026-22169\nCVE-2026-22170\nCVE-2026-22174\nCVE-2026-22177\nCVE-2026-22179\nCVE-2026-27158\nCVE-2026-27159\nCVE-2026-27164\nCVE-2026-27165\nCVE-2026-27209\nCVE-2026-27524\nCVE-2026-27566\nCVE-2026-28455\nCVE-2026-29607\nCVE-2026-31994\nCVE-2026-31995\nCVE-2026-32000\nCVE-2026-32003\nCVE-2026-32008\nCVE-2026-32010\nCVE-2026-32017\nCVE-2026-32018\nCVE-2026-32019\nCVE-2026-32020\nCVE-2026-32022\nCVE-2026-32024\nCVE-2026-32029\nCVE-2026-32030\nCVE-2026-32032\nCVE-2026-32034\nCVE-2026-32039\nCVE-2026-32045\nCVE-2026-32046\nCVE-2026-32049\nCVE-2026-32056\nCVE-2026-32061\nCVE-2026-32062\nCVE-2026-32063\nCVE-2026-32064\nCVE-2026-32896\nCVE-2026-32897\nCVE-2026-32900\nCVE-2026-32907\nCVE-2026-32908\nCVE-2026-3689\nCVE-2026-3690\nCVE-2026-4039\n","source":{"id":8,"name":"csaf_certbund"},"advisoryProduct":[{"id":"6db2d1d4-2a69-34b0-8971-f86e12f519fb","product":{"name":"OpenClaw","vendor":{"name":"n/a"}}},{"id":"7c25fc04-6585-3e02-89ea-8f684c89588d","product":{"name":"2026.2.22","vendor":{"name":"open source"}}}]}}]}