PT-2026-35764 · Openclaw · Openclaw

Peng Zhou · Published 2026-04-07 · Updated 2026-05-01 · CVE-2026-41379

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.3.28

Description Authenticated operators with write permissions can escalate privileges to access admin-class Talk Voice configuration persistence. This is possible by exploiting the 'chat.send' endpoint to reach and modify sensitive voice configuration settings intended exclusively for administrators.

Recommendations Update to version 2026.3.28 or later. Restrict access to the 'chat.send' endpoint for users with operator.write privileges to minimize the risk of exploitation.

Fix

LPE

Incorrect Authorization

Improper Privilege Management

Weakness Enumeration

CWE-863

CWE-269

Related Identifiers

CVE-2026-41379

GHSA-3Q42-XMXV-9VFR

Affected Products

Openclaw

References · 8

• https://github.com/openclaw/openclaw/security/advisories/GHSA-3q42-xmxv-9vfr · Vendor Advisory
• https://github.com/openclaw/openclaw/commit/e34694733fc64931ed4a543c73d84ad3435d5df1 · Patch
• https://osv.dev/vulnerability/GHSA-3q42-xmxv-9vfr · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-41379 · Security Note
• https://github.com/openclaw/openclaw · Note
• https://t.me/cveNotify/161763 · Telegram Post
• https://twitter.com/CVEnew/status/2049227541387333707 · Twitter Post
• https://vulncheck.com/advisories/openclaw-privilege-escalation-via-chat-send-to-admin-class-talk-voice-config · Note