PT-2026-35764 · Openclaw · Openclaw

Peng Zhou · CVE-2026-41379 · Published 2026-04-07 · Updated 2026-05-01

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.3.28

Description Authenticated operators with write permissions can escalate privileges to access admin-class Talk Voice configuration persistence. This is possible by exploiting the 'chat.send' endpoint to reach and modify sensitive voice configuration settings intended exclusively for administrators.

Recommendations Update to version 2026.3.28 or later. Restrict access to the 'chat.send' endpoint for users with operator.write privileges to minimize the risk of exploitation.

Exploit

Fix

LPE

Improper Privilege Management

Incorrect Authorization

Weakness Enumeration

CWE-269

CWE-863

Related Identifiers

CVE-2026-41379

GHSA-3Q42-XMXV-9VFR

Affected Products

Openclaw

References · 10

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/41xxx/CVE-2026-41379.json · Exploit
• https://github.com/openclaw/openclaw/commit/e34694733fc64931ed4a543c73d84ad3435d5df1 · Patch
• https://github.com/openclaw/openclaw/security/advisories/GHSA-3q42-xmxv-9vfr · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-41379 · Security Note
• https://osv.dev/vulnerability/GHSA-3q42-xmxv-9vfr · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-41379 · Vendor Advisory
• https://github.com/openclaw/openclaw · Note
• https://twitter.com/CVEnew/status/2049227541387333707 · Twitter Post
• https://vulncheck.com/advisories/openclaw-privilege-escalation-via-chat-send-to-admin-class-talk-voice-config · Note
• https://t.me/cveNotify/161763 · Telegram Post