Security Advisory

CVE-2026-42433

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-05-05 11:24:53

Last updated 2026-05-05 14:12:48

Assigner VulnCheck

CVSS score 7.1

State PUBLISHED

Description

OpenClaw before 2026.4.10 contains an authorization bypass vulnerability allowing operator.write message-tool paths to access Matrix profile persistence requiring admin-level authority. Attackers can exploit insufficient access controls to mutate persistent profile configuration through non-owner message-tool runs.

← Browse all CVEs View on cve.org ↗