PT-2026-39688 · Openclaw · Openclaw

Keensecuritylab + 1 · Published 2026-04-25 · Updated 2026-05-11 · CVE-2026-44999

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.4.20

Description OpenClaw fails to properly preserve untrusted labels for isolated cron awareness events. This allows output from cron agents triggered by webhooks to be recorded as trusted system events. This trust-labeling issue can be exploited to enhance prompt-injection attacks by making untrusted events appear as trusted System events.

Recommendations Update to version 2026.4.20.

Fix

Insufficient Verification of Data Authenticity

Weakness Enumeration

CWE-345

Related Identifiers

CVE-2026-44999

GHSA-57R2-H2WJ-G887

GHSA-M5J2-R859-R5CV

Affected Products

Openclaw

References · 9

• https://github.com/openclaw/openclaw/security/advisories/GHSA-57r2-h2wj-g887 · Vendor Advisory
• https://github.com/openclaw/openclaw/commit/f61896b03cc7031f51106a04566831f4ac2a0bd7 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-44999 · Security Note
• https://osv.dev/vulnerability/GHSA-57r2-h2wj-g887 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-m5j2-r859-r5cv · Vendor Advisory
• https://vulncheck.com/advisories/openclaw-improper-trust-labeling-in-isolated-cron-awareness-events · Patch
• https://github.com/openclaw/openclaw · Note
• https://twitter.com/CVEnew/status/2053932435231150442 · Twitter Post
• https://t.me/CVEtracker/53385 · Telegram Post