Beveiligingsadvies

CVE-2026-35656

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-04-10 16:03:18

Laatst bijgewerkt 2026-06-23 16:16:12

Toegewezen door VulnCheck

CVSS-score 6.5

Status PUBLISHED

Beschrijving

OpenClaw before 2026.3.22 contains an authentication bypass vulnerability in the X-Forwarded-For header processing when trustedProxies is configured, allowing attackers to spoof loopback hops. Remote attackers can inject forged forwarding headers to bypass canvas authentication and rate-limiting protections by masquerading as loopback clients.

← Alle CVE's bekijken Bekijk op cve.org ↗