PT-2026-39695 · Openclaw · Openclaw

Keensecuritylab · Published 2026-05-11 · Updated 2026-05-11 · CVE-2026-45006

Mitre

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

OpenClaw before 2026.4.23 contains an improper access control vulnerability in the gateway tool's config.apply and config.patch operations that allows compromised models to write unsafe configuration changes by bypassing an incomplete denylist protection. Attackers can persist malicious config modifications affecting command execution, network behavior, credentials, and operator policies that survive restart.

Fix

Incomplete List of Disallowed Inputs

Weakness Enumeration

CWE-184

Related Identifiers

CVE-2026-45006

Affected Products

Openclaw

References · 3

• https://github.com/openclaw/openclaw/security/advisories/GHSA-cwj3-vqpp-pmxr · Vendor Advisory
• https://github.com/openclaw/openclaw/commit/bceda6089aa7b3695cc7696b43c61ae3d01bb0ec · Patch
• https://vulncheck.com/advisories/openclaw-unsafe-config-mutation-via-gateway-tool-denylist-bypass · Note