Beveiligingsadvies

CVE-2026-41377

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-04-28 18:09:40
Laatst bijgewerkt 2026-04-29 19:54:20
Toegewezen door VulnCheck
CVSS-score 5.1
Status PUBLISHED

Beschrijving

OpenClaw before 2026.3.31 contains a fail-open vulnerability in the plugin installation flow where security scan failures do not block installation. Attackers can exploit scan failures to install untrusted plugins when operators proceed despite visible scan warnings.