PT-2026-34770 · Openclaw · Openclaw

Wang Dong · CVE-2026-41339 · Published 2026-04-07 · Updated 2026-04-25

Positive Technologies (AI Summary)

CVSS v4.0

5.3

Medium

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.4.2

Description Authenticated clients without administrative privileges can access configPath and stateDir metadata within Gateway connect success snapshots. This exposure allows non-admin clients to recover host-specific filesystem paths and deployment details, which can be used for host fingerprinting and to facilitate chained attacks.

Recommendations Update to version 2026.4.2.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

CWE-497

Related Identifiers

CVE-2026-41339

GHSA-2F7J-RP58-MR42

GHSA-R7P2-R9G4-4XPH

Affected Products

Openclaw

References · 10

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/41xxx/CVE-2026-41339.json · Exploit
• https://github.com/openclaw/openclaw/commit/676b748056b5efca6f1255708e9dd9469edf5e2e · Patch
• https://github.com/openclaw/openclaw/security/advisories/GHSA-2f7j-rp58-mr42 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-41339 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-r7p2-r9g4-4xph · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-2f7j-rp58-mr42 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-41339 · Security Note
• https://github.com/openclaw/openclaw · Note
• https://vulncheck.com/advisories/openclaw-information-disclosure-via-gateway-connect-snapshot · Note
• https://twitter.com/CVEnew/status/2048168369183150288 · Twitter Post