The web interface for the OpenClaw AI assistant was detected on the remote host.

The OpenClaw AI assistant is installed on the remote host.

Note that enabling the 'Perform thorough tests' setting will search the file system for the product.

The version of the OpenClaw AI assistant installed on the remote macOS host is 2026.2.6 or later but prior to 2026.2.14. It is, therefore, affected by a remote code execution vulnerability:

  - The OpenClaw macOS desktop client registers the openclaw:// URL scheme. For openclaw://agent deep links without an     unattended key, the app shows a confirmation dialog that only displays the first 240 characters of the message but     executes the full message after the user clicks Run. An attacker could pad the message with whitespace to push a     malicious payload outside the visible preview, increasing the chance a user approves a different message than the     one that is actually executed. (CVE-2026-26320)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of the OpenClaw AI assistant installed on the remote host is prior to 2026.2.1. It is, therefore, affected by an authentication bypass vulnerability:

  - If channels.telegram.webhookSecret is not set when in Telegram webhook mode, OpenClaw may accept webhook HTTP     requests without verifying Telegram's secret token header, allowing forged Telegram updates that could lead to     unintended bot actions. (CVE-2026-25474)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of the OpenClaw AI assistant installed on the remote host is prior to 2026.2.15. It is, therefore, affected by multiple vulnerabilities, including:

  - A configuration injection issue in the Docker tool sandbox could allow dangerous Docker options such as bind mounts,     host networking, and unconfined profiles to be applied, enabling container escape or host data access.
    (CVE-2026-27002)

  - The current working directory path was embedded into the agent system prompt without sanitization, allowing prompt     injection via crafted directory names containing control or format characters. (CVE-2026-27001)

  - A bug in download skill installation allowed targetDir values from skill frontmatter to resolve outside the per-skill     tools directory, potentially writing files outside the intended install sandbox. (CVE-2026-27008)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of the OpenClaw AI assistant installed on the remote host is prior to 2026.1.30. It is, therefore, affected by a path traversal vulnerability:

  - The isValidMedia() function in src/media/parse.ts allows arbitrary file paths including absolute paths, home     directory paths, and directory traversal sequences. An agent can read any file on the system by outputting     MEDIA:/path/to/file, exfiltrating sensitive data to the user/channel. (CVE-2026-25475)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of the OpenClaw AI assistant installed on the remote host is prior to 2026.1.29. It is, therefore, affected by multiple vulnerabilities:

  - A command injection vulnerability exists in OpenClaw's Docker sandbox execution mechanism due to unsafe     handling of the PATH environment variable when constructing shell commands. An authenticated user able to     control environment variables could influence command execution within the container context.
    (CVE-2026-24763)

  - The sshNodeCommand function constructed a shell script without properly escaping the user-supplied project     path in an error message. When the cd command failed, the unescaped path was interpolated directly into an     echo statement, allowing arbitrary command execution on the remote SSH host. The parseSSHTarget function     did not validate that SSH target strings could not begin with a dash. An attacker-supplied target like
    -oProxyCommand=... would be interpreted as an SSH configuration flag rather than a hostname, allowing     arbitrary command execution on the local machine. (CVE-2026-25157)

  - OpenClaw (aka clawdbot or Moltbot) before 2026.1.29 obtains a gatewayUrl value from a query string and     automatically makes a WebSocket connection without prompting, sending a token value. (CVE-2026-25253)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of the OpenClaw AI assistant installed on the remote host is prior to 2026.1.20. It is, therefore, affected by a command injection vulnerability:

  - An unauthenticated local client could use the Gateway WebSocket API to write config via config.apply and set     unsafe cliPath values that were later used for command discovery, enabling command injection as the gateway user.
    (CVE-2026-25593)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of the OpenClaw AI assistant installed on the remote host is prior to 2026.2.3. It is, therefore, affected by a prompt injection vulnerability:

  - When the Slack integration is enabled, channel metadata (topic/description) can be incorporated into the model's     system prompt, allowing untrusted Slack channel metadata to be treated as higher-trust system input.
    (CVE-2026-24764)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of the OpenClaw AI assistant installed on the remote host is prior to 2026.2.13. It is, therefore, affected by multiple vulnerabilities:

  - The optional BlueBubbles iMessage channel plugin could accept webhook requests as authenticated based only on the     TCP peer address being loopback, even when the configured webhook secret was missing or incorrect.
    (CVE-2026-26316)

  - Browser download helpers accepted an unsanitized output path, allowing path traversal to write downloads outside     the intended temp downloads directory when invoked via browser control gateway routes. (CVE-2026-26972)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of the OpenClaw AI assistant installed on the remote host is prior to 2026.2.14. It is, therefore, affected by multiple vulnerabilities, including:

  - A command injection in the maintainer clawtributors updater script allowed arbitrary command execution via crafted     git commit author metadata. (CVE-2026-26323)

  - The Gateway tool accepted a tool-supplied gatewayUrl without sufficient restrictions, enabling SSRF via outbound     WebSocket connections to user-specified targets. (CVE-2026-26322)

  - The optional Telnyx webhook handler could accept unsigned inbound webhook requests when telnyx.publicKey is not     configured, allowing unauthenticated callers to forge Telnyx events. (CVE-2026-26319)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This is an informational plugin to inform the user that the scanner has detected a publicly accessible OpenClaw Gateway Dashboard instance on the target application. OpenClaw is your own personal AI assistant. This detection is included in the AI and LLM category.

ID	Name	Product	Family	Published	Updated	Severity
298065	OpenClaw AI Assistant Web Detection	Nessus	Service detection	2/5/2026	3/23/2026	info
297108	OpenClaw AI Assistant Installed	Nessus	Artificial Intelligence	1/29/2026	3/18/2026	info
299796	OpenClaw 2026.2.6 < 2026.2.14 Deep Link Message Truncation (macOS) (GHSA-7q2j-c4q5-rm27)	Nessus	Artificial Intelligence	2/23/2026	2/27/2026	high
299793	OpenClaw < 2026.2.1 Authentication Bypass (GHSA-mp5h-m6qj-6292)	Nessus	Artificial Intelligence	2/23/2026	2/27/2026	high
299798	OpenClaw < 2026.2.15 Multiple Vulnerabilities	Nessus	Artificial Intelligence	2/23/2026	2/27/2026	high
298450	OpenClaw < 2026.1.30 Path Traversal (GHSA-r8g4-86fx-92mq)	Nessus	Artificial Intelligence	2/10/2026	2/27/2026	medium
297816	OpenClaw < 2026.1.29 Multiple Vulnerabilities	Nessus	Artificial Intelligence	2/4/2026	2/27/2026	high
298465	OpenClaw < 2026.1.20 Command Injection (GHSA-g55j-c2v4-pjcg)	Nessus	Artificial Intelligence	2/10/2026	2/27/2026	high
299794	OpenClaw < 2026.2.3 Prompt Injection (GHSA-782p-5fr5-7fj8)	Nessus	Artificial Intelligence	2/23/2026	2/27/2026	low
299795	OpenClaw < 2026.2.13 Multiple Vulnerabilities	Nessus	Artificial Intelligence	2/23/2026	2/27/2026	high
299797	OpenClaw < 2026.2.14 Multiple Vulnerabilities	Nessus	Artificial Intelligence	2/23/2026	2/27/2026	high
115123	OpenClaw Gateway Dashboard Detected	Web App Scanning	Artificial Intelligence	1/30/2026	1/30/2026	info

Detections

Analytics

Plugins Search

info

info

high

high

high

medium

high

high

low

high

high

info