PT-2026-38251 · Openclaw · Openclaw

Vladimir Tokarev · Published 2026-04-23 · Updated 2026-05-28 · CVE-2026-44118

Positive Technologies (AI Summary)

CVSS v4.0

8.5

High

Base vector

AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.4.22

Description OpenClaw derives loopback MCP owner context from spoofable server-issued bearer tokens in request headers. Non-owner loopback clients can bypass owner-gated operations by manipulating the sender-owner header metadata or the senderIsOwner flag, allowing them to present themselves as the owner and gain full owner control.

Recommendations Update to version 2026.4.22.

Exploit

Fix

LPE

Authentication Bypass by Spoofing

Improper Access Control

Weakness Enumeration

CWE-290

CWE-284

Related Identifiers

BDU:2026-08023

CVE-2026-44118

GHSA-35VF-VW9F-Q3CR

GHSA-R6XH-PQHR-V4XH

Affected Products

Openclaw

References · 20

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/44xxx/CVE-2026-44118.json · Exploit
• https://github.com/openclaw/openclaw/security/advisories/GHSA-r6xh-pqhr-v4xh · Vendor Advisory
• https://github.com/openclaw/openclaw/commit/3cb1a56bfc9579a0f2336f9cfa12a8a744332a19 · Patch
• https://osv.dev/vulnerability/CVE-2026-44118 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-35vf-vw9f-q3cr · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-08023 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-44118 · Security Note
• https://osv.dev/vulnerability/GHSA-r6xh-pqhr-v4xh · Vendor Advisory
• https://github.com/openclaw/openclaw · Note
• https://t.me/true_secator/8221 · Telegram Post
• https://twitter.com/brandonbango/status/2055344980835614796 · Twitter Post
• https://t.me/CVEtracker/52912 · Telegram Post
• https://twitter.com/TheHackersNews/status/2056016714106839364 · Twitter Post
• https://reddit.com/r/pwnhub/comments/1tdyfar/openclaw_vulnerabilities_enable_data_theft_and · Reddit Post
• https://reddit.com/r/artificial/comments/1tq0t1g/the_openclaw_crisis_is_the_most_complete_case · Reddit Post