PT-2026-23556 · Openclaw+1 · Openclaw+1

Yueyuel · Published 2026-02-02 · Updated 2026-03-06 · CVE-2026-28481

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.2.1

Description The software contains an information disclosure issue in the MS Teams attachment downloader (optional extension must be enabled). When retrying downloads after receiving 401 or 403 responses, the application sends Authorization bearer tokens to untrusted hosts matching the permissive suffix-based allowlist, potentially leading to token theft. The default download allowlist uses suffix matching, and a message referencing an untrusted but allowlisted host could cause the bearer token to be sent to the incorrect location.

Recommendations Upgrade to OpenClaw version 2026.2.1 or later. If the MS Teams extension is not needed, disable it. If upgrading is not possible, ensure the auth host allowlist is strict, including only Microsoft-owned endpoints that require authentication, and avoid wildcard or broad suffix entries.

Fix

Weakness Enumeration

CWE-201

Related Identifiers

BDU:2026-06333

CVE-2026-28481

GHSA-7VWX-582J-J332

Affected Products

Ms Teams

Openclaw

References · 10

• https://github.com/openclaw/openclaw/security/advisories/GHSA-7vwx-582j-j332 · Vendor Advisory
• https://github.com/openclaw/openclaw/commit/41cc5bcd4f1d434ad1bbdfa55b56f25025ecbf6b · Patch
• https://osv.dev/vulnerability/GHSA-7vwx-582j-j332 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-28481 · Security Note
• https://osv.dev/vulnerability/CVE-2026-28481 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-06333 · Security Note
• https://github.com/openclaw/openclaw · Note
• https://github.com/openclaw/openclaw/releases/tag/v2026.2.1 · Note
• https://vulncheck.com/advisories/openclaw-bearer-token-leakage-via-ms-teams-attachment-downloader-suffix-matching · Note
• https://t.me/CVEtracker/46500 · Telegram Post