Beveiligingsadvies

CVE-2026-43578

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-05-06 19:49:21

Laatst bijgewerkt 2026-05-07 14:59:33

Toegewezen door VulnCheck

CVSS-score 9.1

Status PUBLISHED

Beschrijving

OpenClaw versions 2026.3.31 before 2026.4.10 contain a privilege escalation vulnerability where heartbeat owner downgrade detection misses local background async exec completion events. Attackers can exploit this by providing untrusted completion content to leave a run in a more privileged context than intended.

← Alle CVE's bekijken Bekijk op cve.org ↗