CVE-2026-33580 in OpenClaw
요약 (영어)
OpenClaw before 2026.3.28 contains a missing rate limiting vulnerability in the Nextcloud Talk webhook authentication that allows attackers to brute-force weak shared secrets. Attackers who can reach the webhook endpoint can exploit this to forge inbound webhook events by repeatedly attempting authentication without throttling.
책임이 있는
VulnCheck
예약하다
2026. 03. 23.
공개
2026. 03. 31.
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 354396 | OpenClaw Webhook 정보 공개 | 307 | 정의되지 않음 | 공식 수정 | CVE-2026-33580 |