Beveiligingsadvies

CVE-2026-41300

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-04-20 23:08:13
Laatst bijgewerkt 2026-05-26 11:52:13
Toegewezen door VulnCheck
CVSS-score 6.9
Status PUBLISHED

Beschrijving

OpenClaw before 2026.3.31 contains a trust-decline vulnerability that preserves attacker-discovered endpoints in remote onboarding flows. Attackers can route gateway credentials to malicious endpoints by having their discovered URL survive the trust decline process into manual prompts requiring operator acceptance.