CVE-2026-32914 in OpenClaw

Сводка (Английский)

OpenClaw before 2026.3.12 contains an insufficient access control vulnerability in the /config and /debug command handlers that allows command-authorized non-owners to access owner-only surfaces. Attackers with command authorization can read or modify privileged configuration settings restricted to owners by exploiting missing owner-level permission checks.

Ответственный

VulnCheck

Резервировать

16.03.2026

Раскрытие

29.03.2026

Записи

VulDB provides additional information and datapoints for this CVE:

ИД	Уязвимость	CWE	Экс	Кон	CVE
354116	OpenClaw эскалация привилегий	863	Не определено	Официальное исправление	CVE-2026-32914