Beveiligingsadvies

CVE-2026-32057

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-03-21 00:42:27

Laatst bijgewerkt 2026-06-23 16:15:04

Toegewezen door VulnCheck

CVSS-score 7.1

Status PUBLISHED

Beschrijving

OpenClaw versions prior to 2026.2.25 contain an authentication bypass vulnerability in the trusted-proxy Control UI pairing mechanism that accepts client.id=control-ui without proper device identity verification. An authenticated node role websocket client can exploit this by using the control-ui client identifier to skip pairing requirements and gain unauthorized access to node event execution flows.

← Alle CVE's bekijken Bekijk op cve.org ↗