CVE-2026-33580 in OpenClaw
Zusammenfassung (Englisch)
OpenClaw before 2026.3.28 contains a missing rate limiting vulnerability in the Nextcloud Talk webhook authentication that allows attackers to brute-force weak shared secrets. Attackers who can reach the webhook endpoint can exploit this to forge inbound webhook events by repeatedly attempting authentication without throttling.
Zuständig
VulnCheck
Reservieren
23.03.2026
Veröffentlichung
31.03.2026
Einträge
VulDB provides additional information and datapoints for this CVE:
| ID | Schwachstelle | CWE | Aus | Mas | CVE |
|---|---|---|---|---|---|
| 354396 | OpenClaw Webhook Information Disclosure | 307 | Nicht definiert | Offizieller Fix | CVE-2026-33580 |