Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • World
  • Users
  • Groups
Skins
  • Light
  • Brite
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (Cyborg)
  • No Skin
Collapse
Brand Logo

CIRCLE WITH A DOT

  1. Home
  2. Uncategorized
  3. OpenClaw is averaging 1.8 CVEs *PER DAY* https://days-since-openclaw-cve.com/

OpenClaw is averaging 1.8 CVEs *PER DAY* https://days-since-openclaw-cve.com/

Scheduled Pinned Locked Moved Uncategorized
23 Posts 16 Posters 2 Views
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • cwebber@social.coopC cwebber@social.coop

    By the way, I encourage browsing through the CVEs reported https://nvd.nist.gov/vuln/search#/nvd/home?keyword=openclaw&resultType=records

    These are by and large not minor CVEs.

    vv@solarpunk.moeV This user is from outside of this forum
    vv@solarpunk.moeV This user is from outside of this forum
    vv@solarpunk.moe
    wrote last edited by
    #8

    @cwebber the more CVEs a project has, the more Web Scale it is

    phl@mastodon.socialP darkling@mstdn.socialD 2 Replies Last reply
    0
    • R relay@relay.mycrowd.ca shared this topic
    • cwebber@social.coopC cwebber@social.coop

      OpenClaw is averaging 1.8 CVEs *PER DAY* https://days-since-openclaw-cve.com/

      That's... wow. New high score!

      maol@c.imM This user is from outside of this forum
      maol@c.imM This user is from outside of this forum
      maol@c.im
      wrote last edited by
      #9

      @cwebber
      OpenClaw is averaging 1.8 CVEs *PER DAY*... since day 1, i.e. November 2025, wow!

      They must be popular to have so many security researchers check them out 🤓

      1 Reply Last reply
      0
      • cwebber@social.coopC cwebber@social.coop

        OpenClaw is averaging 1.8 CVEs *PER DAY* https://days-since-openclaw-cve.com/

        That's... wow. New high score!

        shansterable@ohai.socialS This user is from outside of this forum
        shansterable@ohai.socialS This user is from outside of this forum
        shansterable@ohai.social
        wrote last edited by
        #10

        @cwebber
        CVE = Common Vulnerabilities and Exposures, in case that helps anyone else besides me

        I try to do for initialisms and acronyms what alt text does for images.

        Wikipedia: "The Common Vulnerabilities and Exposures (CVE) system, originally Common Vulnerability Enumeration, provides a reference method for publicly known information-security vulnerabilities and exposures."

        thanatoidjones@mastodon.socialT 1 Reply Last reply
        0
        • vv@solarpunk.moeV vv@solarpunk.moe

          @cwebber the more CVEs a project has, the more Web Scale it is

          phl@mastodon.socialP This user is from outside of this forum
          phl@mastodon.socialP This user is from outside of this forum
          phl@mastodon.social
          wrote last edited by
          #11

          @vv @cwebber https://tenor.com/h1iAp0cylbl.gif

          vv@solarpunk.moeV 1 Reply Last reply
          0
          • shansterable@ohai.socialS shansterable@ohai.social

            @cwebber
            CVE = Common Vulnerabilities and Exposures, in case that helps anyone else besides me

            I try to do for initialisms and acronyms what alt text does for images.

            Wikipedia: "The Common Vulnerabilities and Exposures (CVE) system, originally Common Vulnerability Enumeration, provides a reference method for publicly known information-security vulnerabilities and exposures."

            thanatoidjones@mastodon.socialT This user is from outside of this forum
            thanatoidjones@mastodon.socialT This user is from outside of this forum
            thanatoidjones@mastodon.social
            wrote last edited by
            #12

            @shansterable @cwebber Thank you!

            1 Reply Last reply
            0
            • vv@solarpunk.moeV vv@solarpunk.moe

              @cwebber the more CVEs a project has, the more Web Scale it is

              darkling@mstdn.socialD This user is from outside of this forum
              darkling@mstdn.socialD This user is from outside of this forum
              darkling@mstdn.social
              wrote last edited by
              #13

              @vv @cwebber I thought webscale was the unsightly crusty build-up on the inside of the intertubes.

              1 Reply Last reply
              0
              • cwebber@social.coopC cwebber@social.coop

                OpenClaw is averaging 1.8 CVEs *PER DAY* https://days-since-openclaw-cve.com/

                That's... wow. New high score!

                disorderlyf@todon.euD This user is from outside of this forum
                disorderlyf@todon.euD This user is from outside of this forum
                disorderlyf@todon.eu
                wrote last edited by
                #14

                @cwebber

                Link Preview Image
                1 Reply Last reply
                0
                • phl@mastodon.socialP phl@mastodon.social

                  @vv @cwebber https://tenor.com/h1iAp0cylbl.gif

                  vv@solarpunk.moeV This user is from outside of this forum
                  vv@solarpunk.moeV This user is from outside of this forum
                  vv@solarpunk.moe
                  wrote last edited by
                  #15

                  @phl @cwebber yep, this is what i was thinking of, haha

                  phl@mastodon.socialP 1 Reply Last reply
                  0
                  • cwebber@social.coopC cwebber@social.coop

                    OpenClaw is averaging 1.8 CVEs *PER DAY* https://days-since-openclaw-cve.com/

                    That's... wow. New high score!

                    turre@mementomori.socialT This user is from outside of this forum
                    turre@mementomori.socialT This user is from outside of this forum
                    turre@mementomori.social
                    wrote last edited by
                    #16

                    @cwebber CVE as a service

                    1 Reply Last reply
                    0
                    • vv@solarpunk.moeV vv@solarpunk.moe

                      @phl @cwebber yep, this is what i was thinking of, haha

                      phl@mastodon.socialP This user is from outside of this forum
                      phl@mastodon.socialP This user is from outside of this forum
                      phl@mastodon.social
                      wrote last edited by
                      #17

                      @vv @cwebber It lives rent free in our heads all these years later 😄

                      vv@solarpunk.moeV 1 Reply Last reply
                      0
                      • cwebber@social.coopC cwebber@social.coop

                        OpenClaw is averaging 1.8 CVEs *PER DAY* https://days-since-openclaw-cve.com/

                        That's... wow. New high score!

                        ckure@infosec.exchangeC This user is from outside of this forum
                        ckure@infosec.exchangeC This user is from outside of this forum
                        ckure@infosec.exchange
                        wrote last edited by
                        #18

                        @cwebber Everybody: AI can’t find CVEs
                        OpenClaw: Bet

                        1 Reply Last reply
                        0
                        • phl@mastodon.socialP phl@mastodon.social

                          @vv @cwebber It lives rent free in our heads all these years later 😄

                          vv@solarpunk.moeV This user is from outside of this forum
                          vv@solarpunk.moeV This user is from outside of this forum
                          vv@solarpunk.moe
                          wrote last edited by
                          #19

                          @phl @cwebber i can't bring myself to watch it because the voice is so annoying

                          1 Reply Last reply
                          0
                          • cwebber@social.coopC cwebber@social.coop

                            OpenClaw also got a terrifying privilege escalation vulnerability https://nvd.nist.gov/vuln/detail/CVE-2026-33579

                            Meanwhile the OpenClaw founder is claiming shush, it's no big deal, probably most of these aren't really exploitable! (There's good business interest reasons to argue that, since OpenClaw's founders got acquired by OpenAI) https://news.ycombinator.com/item?id=47629849

                            Okay. I know I have more than a few security researchers following me. There's a public list of literally hundreds of thousands of publicly accessible OpenClaw instances right here: https://openclaw.allegro.earth/

                            Anyone try taking a sampling of them and testing how vulnerable against recent escalation CVEs they are? Could be a rather juicy writeup!

                            lunathemoongirl@cailincat.cloudL This user is from outside of this forum
                            lunathemoongirl@cailincat.cloudL This user is from outside of this forum
                            lunathemoongirl@cailincat.cloud
                            wrote last edited by
                            #20

                            @cwebber I mean you could make an argument that the CVE s dont matter given the target audience of openclaw

                            cwebber@social.coopC 1 Reply Last reply
                            0
                            • lunathemoongirl@cailincat.cloudL lunathemoongirl@cailincat.cloud

                              @cwebber I mean you could make an argument that the CVE s dont matter given the target audience of openclaw

                              cwebber@social.coopC This user is from outside of this forum
                              cwebber@social.coopC This user is from outside of this forum
                              cwebber@social.coop
                              wrote last edited by
                              #21

                              @lunathemoongirl Indeed, OpenClaw is a CVE

                              lunathemoongirl@cailincat.cloudL 1 Reply Last reply
                              0
                              • cwebber@social.coopC cwebber@social.coop

                                @lunathemoongirl Indeed, OpenClaw is a CVE

                                lunathemoongirl@cailincat.cloudL This user is from outside of this forum
                                lunathemoongirl@cailincat.cloudL This user is from outside of this forum
                                lunathemoongirl@cailincat.cloud
                                wrote last edited by
                                #22

                                @cwebber why bother exploiting the program when i can ask the Aiagent to please hand over all the keys and password

                                1 Reply Last reply
                                0
                                • cwebber@social.coopC cwebber@social.coop

                                  OpenClaw also got a terrifying privilege escalation vulnerability https://nvd.nist.gov/vuln/detail/CVE-2026-33579

                                  Meanwhile the OpenClaw founder is claiming shush, it's no big deal, probably most of these aren't really exploitable! (There's good business interest reasons to argue that, since OpenClaw's founders got acquired by OpenAI) https://news.ycombinator.com/item?id=47629849

                                  Okay. I know I have more than a few security researchers following me. There's a public list of literally hundreds of thousands of publicly accessible OpenClaw instances right here: https://openclaw.allegro.earth/

                                  Anyone try taking a sampling of them and testing how vulnerable against recent escalation CVEs they are? Could be a rather juicy writeup!

                                  solonovamax@tech.lgbtS This user is from outside of this forum
                                  solonovamax@tech.lgbtS This user is from outside of this forum
                                  solonovamax@tech.lgbt
                                  wrote last edited by
                                  #23

                                  @cwebber I doubt they update frequently, so you can even try some quite old CVEs against them!

                                  1 Reply Last reply
                                  0
                                  • R relay@relay.infosec.exchange shared this topic
                                  Reply
                                  • Reply as topic
                                  Log in to reply
                                  • Oldest to Newest
                                  • Newest to Oldest
                                  • Most Votes


                                  • Login

                                  • Login or register to search.
                                  • First post
                                    Last post
                                  0
                                  • Categories
                                  • Recent
                                  • Tags
                                  • Popular
                                  • World
                                  • Users
                                  • Groups