PT-2026-33867 · Openclaw · Openclaw

Keensecuritylab · Published 2026-04-03 · Updated 2026-04-27 · CVE-2026-41300

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.3.31

Description An issue in remote onboarding flows allows attacker-discovered endpoints to be preserved after a trust decline process. This enables attackers to route gateway credentials to malicious endpoints by ensuring their discovered URL survives into manual prompts that require operator acceptance.

Recommendations Update to version 2026.3.31 or later.

Fix

Weakness Enumeration

CWE-670

CWE-372

Related Identifiers

CVE-2026-41300

GHSA-9F4W-67G7-MQWV

Affected Products

Openclaw

References · 10

• https://github.com/openclaw/openclaw/security/advisories/GHSA-9f4w-67g7-mqwv · Vendor Advisory
• https://github.com/openclaw/openclaw/commit/2a75416634837c21ed05b8c3ed906eb7a7807060 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-41300 · Security Note
• https://osv.dev/vulnerability/GHSA-9f4w-67g7-mqwv · Vendor Advisory
• https://github.com/openclaw/openclaw · Note
• https://github.com/openclaw/openclaw/releases/tag/v2026.3.31 · Note
• https://twitter.com/VulmonFeeds/status/2046456658990129489 · Twitter Post
• https://twitter.com/CVEnew/status/2046571878794588378 · Twitter Post
• https://t.me/cveNotify/161117 · Telegram Post
• https://vulncheck.com/advisories/openclaw-attacker-discovered-endpoint-preservation-in-remote-onboarding · Note