Beveiligingsadvies

CVE-2026-41388

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-04-28 18:09:50
Laatst bijgewerkt 2026-04-29 13:31:39
Toegewezen door VulnCheck
CVSS-score 6.5
Status PUBLISHED

Beschrijving

OpenClaw before 2026.3.31 contains a configuration management vulnerability where startup migration treats empty-array settings as missing values. Attackers can restart the application to rehydrate revoked Tlon configuration from file state, bypassing intended revocation controls.