PT-2026-35559 · Openclaw · Openclaw

Peng Zhou · CVE-2026-41371 · Published 2026-04-01 · Updated 2026-06-05

Positive Technologies (AI Summary)

CVSS v3.1

8.5

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:L

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.3.28

Description Improper authorization checks in the 'chat.send' path allow write-scoped gateway callers to perform admin-only session reset operations. This enables attackers to rotate target sessions, archive previous transcript states, and force the generation of new session IDs without possessing the required admin scope.

Recommendations Update to version 2026.3.28 or later. As a temporary workaround, restrict access to the 'chat.send' function to minimize the risk of unauthorized session resets.

Exploit

Fix

RCE

LPE

Incorrect Authorization

Improper Access Control

Weakness Enumeration

CWE-863

CWE-284

Related Identifiers

CVE-2026-41371

GHSA-5R8F-96GM-5J6G

Affected Products

Openclaw

References · 15

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/41xxx/CVE-2026-41371.json · Exploit
• https://github.com/openclaw/openclaw/security/advisories/GHSA-5r8f-96gm-5j6g · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-41371 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-5r8f-96gm-5j6g · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-41371 · Security Note
• https://github.com/openclaw/openclaw · Note
• https://github.com/openclaw/openclaw/commit/be00fcfccba108f88dc3d4380146c6e058770b03 · Note
• https://github.com/openclaw/openclaw/releases/tag/v2026.3.28 · Note
• https://twitter.com/Tank23x0/status/2062958380684394917 · Twitter Post
• https://twitter.com/CCBalert/status/2049132470788874713 · Twitter Post
• https://twitter.com/CVEarity/status/2049052360950026376 · Twitter Post
• https://t.me/CVEtracker/52013 · Telegram Post
• https://twitter.com/VulmonFeeds/status/2049055163512435183 · Twitter Post
• https://reddit.com/r/pwnhub/comments/1syn4iy/critical_privilege_escalation_vulnerability · Reddit Post
• https://vulncheck.com/advisories/openclaw-privilege-escalation-via-chat-send-reset-command · Note