CVE-2026-41916 in OpenClaw
الملخص
بحسب MITRE • 28/04/2026
OpenClaw before 2026.4.8 contains an authentication state management vulnerability where the resolvedAuth closure becomes stale after configuration reload. Newly accepted gateway connections continue using outdated resolved auth state, allowing attackers to bypass authentication controls through config reload operations.
If you want to get best quality of vulnerability data, you may have to visit VulDB.