snapshot.json

{ "status": { "reviewedAt": "2026-09-09", "state": "clear", "summary": "No known compromise of OpenClaw infrastructure or of the official install and update channels.", "scope": "core · apps · hosted installers", "excludes": "third-party ClawHub skills", "bulletins": [] }, "advisories": { "asOf": "2026-09-11", "source": "https://github.com/openclaw/openclaw/security/advisories", "received": 1799, "published": 722, "closedInvalid": 1039, "cveAssigned": 39, "criticalSubmitted": 137, "criticalClosedInvalid": 123, "criticalPublished": 14, "firstPublished": "2026-01-31", "latestPublished": "2026-09-11", "severity": { "critical": 14, "high": 249, "medium": 390, "low": 69 }, "rejectionBySeverity": { "critical": { "submitted": 137, "closed": 123 }, "high": { "submitted": 731, "closed": 468 }, "medium": { "submitted": 713, "closed": 303 }, "low": { "submitted": 169, "closed": 97 } }, "surfaces": [ { "id": "channels", "label": "Chat connectors", "count": 122, "optional": true }, { "id": "plugins", "label": "Plugins, skills, and ClawHub", "count": 41, "optional": true }, { "id": "browser", "label": "Browser and webview tooling", "count": 51, "optional": true }, { "id": "interop", "label": "MCP and agent interop", "count": 25, "optional": true }, { "id": "gateway", "label": "Gateway, auth, and scopes", "count": 182, "optional": false }, { "id": "exec", "label": "Exec, sandbox, and approvals", "count": 160, "optional": false }, { "id": "filesystem", "label": "Filesystem and path handling", "count": 28, "optional": false }, { "id": "network", "label": "Network egress and SSRF", "count": 17, "optional": false }, { "id": "core", "label": "Other core runtime", "count": 96, "optional": false } ] }, "methodology": { "closure": "Closed records divided by all records at that severity in the snapshot. This does not measure severity downgrades.", "surfaces": "Published advisories grouped by title using priority-ordered, mutually exclusive categories. Add-on classification does not imply disabled by default." } }