Beveiligingsadvies

CVE-2026-41356

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-04-23 21:58:15
Laatst bijgewerkt 2026-04-24 18:19:04
Toegewezen door VulnCheck
CVSS-score 5.4
Status PUBLISHED

Beschrijving

OpenClaw before 2026.3.31 fails to terminate active WebSocket sessions when rotating device tokens. Attackers with previously compromised credentials can maintain unauthorized access through existing WebSocket connections after token rotation.