CVE-2026-33580 in OpenClaw
Сводка (Английский)
OpenClaw before 2026.3.28 contains a missing rate limiting vulnerability in the Nextcloud Talk webhook authentication that allows attackers to brute-force weak shared secrets. Attackers who can reach the webhook endpoint can exploit this to forge inbound webhook events by repeatedly attempting authentication without throttling.
Ответственный
VulnCheck
Резервировать
23.03.2026
Раскрытие
31.03.2026
Записи
VulDB provides additional information and datapoints for this CVE:
| ИД | Уязвимость | CWE | Экс | Кон | CVE |
|---|---|---|---|---|---|
| 354396 | OpenClaw Webhook раскрытие информации | 307 | Не определено | Официальное исправление | CVE-2026-33580 |