Vulnerabilities

TI-2026-29901 CVE-2026-41298 · GHSA-5hff-46vh-rxmw

OpenClaw < 2026.4.2 - Authorization Bypass in Session Termination Endpoint

LOW 23

OpenClaw before 2026.4.2 fails to enforce write scopes on the POST /sessions/:sessionKey/kill endpoint in identity-bearing HTTP modes.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00187 Published 2026-04-20 Fixed in 2026.4.2 CWE-862

TI-2026-29898 CVE-2026-41295 · GHSA-2qrv-rc5x-2g2h

OpenClaw < 2026.4.2 - Untrusted Workspace Channel Shadow Code Execution during Built-in Channel Setup

LOW 38

OpenClaw before 2026.4.2 contains an improper trust boundary vulnerability allowing untrusted workspace channel shadows to execute during built-in channel setup and login.

CVSS 4.0HIGH 8.5 Local No auth User interaction EPSS 0.00131 Published 2026-04-20 Fixed in 2026.4.2 CWE-829

TI-2026-28888 CVE-2026-40045 · GHSA-83f3-hh45-vfw9

OpenClaw < 2026.4.2 - Cleartext Credential Transmission via Unencrypted WebSocket Gateway Endpoints

LOW 25

OpenClaw before 2026.4.2 accepts non-loopback cleartext ws:// gateway endpoints and transmits stored gateway credentials over unencrypted connections.

CVSS 4.0MEDIUM 5.9 Adjacent network No auth User interaction EPSS 0.00116 Published 2026-04-20 Fixed in 2026.4.2 CWE-319

Vulnerabilities

Filters

OpenClaw < 2026.4.2 - Authorization Bypass in Session Termination Endpoint

OpenClaw < 2026.4.2 - Untrusted Workspace Channel Shadow Code Execution during Built-in Channel Setup

OpenClaw < 2026.4.2 - Cleartext Credential Transmission via Unencrypted WebSocket Gateway Endpoints