CVE-2026-41345 in OpenClawИнформация

Сводка

по MITRE • 24.04.2026

OpenClaw before 2026.3.31 contains a credential exposure vulnerability in media download functionality that forwards Authorization headers across cross-origin redirects. Attackers can exploit this by crafting malicious cross-origin redirect chains to intercept sensitive authorization credentials intended for legitimate requests.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Ответственный

VulnCheck

Резервировать

20.04.2026

Раскрытие

24.04.2026

Модерация

принято

Вход

VDB-359296

EPSS

0.00037

KEV

Нет

Деятельности

Очень низкий

Источники

Interested in the pricing of exploits?

See the underground prices here!