CVE-2026-41376 in OpenClawinformación

Resumen

por MITRE • 2026-04-28

OpenClaw before 2026.3.31 contains an allowlist bypass vulnerability in Matrix thread root and reply context handling that fails to properly validate message senders. Attackers can fetch thread-root and reply context messages that should be filtered by sender allowlists, bypassing access controls.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsable

VulnCheck

Reservar

2026-04-20

Divulgación

2026-04-28

Moderación

aceptado

Artículo

VDB-360006

CPE

listo

EPSS

0.00017

KEV

no

Actividades

muy bajo

Sector

Hospital, Pharma, ...

Fuentes

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-41376
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-41376
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-41376/

◂ AnteriorVisión De ConjuntoPróximo ▸

Might our Artificial Intelligence support you?

Check our Alexa App!