CVE-2026-41345 in OpenClawالمعلومات

الملخص

بحسب MITRE • 24/04/2026

OpenClaw before 2026.3.31 contains a credential exposure vulnerability in media download functionality that forwards Authorization headers across cross-origin redirects. Attackers can exploit this by crafting malicious cross-origin redirect chains to intercept sensitive authorization credentials intended for legitimate requests.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

مسؤول

VulnCheck

حجز

20/04/2026

إفشاء

24/04/2026

الاعتدال

تمت الموافقة

إدخال

VDB-359296

EPSS

0.00037

KEV

لا

النشاطات

منخفض جدًا

المصادر

Do you need the next level of professionalism?

Upgrade your account now!