OpenClaw/Clawdbot/Moltbot up to 2026.2.14 Configuration information exposure

Summaryinfo

A vulnerability categorized as problematic has been discovered in OpenClaw, Clawdbot and Moltbot up to 2026.2.14. The affected element is an unknown function of the component Configuration Handler. Such manipulation leads to information exposure. This vulnerability is uniquely identified as CVE-2026-27004. Local access is required to approach this attack. No exploit exists. It is advisable to upgrade the affected component.

Detailsinfo

A vulnerability was found in OpenClaw, Clawdbot and Moltbot up to 2026.2.14. It has been rated as problematic. Affected by this issue is an unknown functionality of the component Configuration Handler. The manipulation with an unknown input leads to a information exposure vulnerability. Using CWE to declare the problem leads to CWE-209. The product generates an error message that includes sensitive information about its environment, users, or associated data. Impacted is confidentiality. CVE summarizes:

OpenClaw is a personal AI assistant. Prior to version 2026.2.15, in some shared-agent deployments, OpenClaw session tools (`sessions_list`, `sessions_history`, `sessions_send`) allowed broader session targeting than some operators intended. This is primarily a configuration/visibility-scoping issue in multi-user environments where peers are not equally trusted. In Telegram webhook mode, monitor startup also did not fall back to per-account `webhookSecret` when only the account-level secret was configured. In shared-agent, multi-user, less-trusted environments: session-tool access could expose transcript content across peer sessions. In single-agent or trusted environments, practical impact is limited. In Telegram webhook mode, account-level secret wiring could be missed unless an explicit monitor webhook secret override was provided. Version 2026.2.15 fixes the issue.

The advisory is shared for download at github.com. This vulnerability is handled as CVE-2026-27004 since 02/17/2026. The exploitation is known to be easy. The attack needs to be approached locally. No form of authentication is required for exploitation. There are neither technical details nor an exploit publicly available. The MITRE ATT&CK project declares the attack technique as T1592.

Upgrading to version 2026.2.15 eliminates this vulnerability.

Once again VulDB remains the best source for vulnerability data.

Productinfo

Type

• Artificial Intelligence Software

Name

• Clawdbot
• Moltbot
• OpenClaw

Version

• 2026.2.0
• 2026.2.1
• 2026.2.2
• 2026.2.3
• 2026.2.4
• 2026.2.5
• 2026.2.6
• 2026.2.7
• 2026.2.8
• 2026.2.9
• 2026.2.10
• 2026.2.11
• 2026.2.12
• 2026.2.13
• 2026.2.14

Website

• Product: https://github.com/openclaw/openclaw/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion