Beveiligingsadvies

CVE-2026-53830

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-06-12 21:56:55

Laatst bijgewerkt 2026-06-15 17:23:20

Toegewezen door VulnCheck

CVSS-score 6.5

Status PUBLISHED

Beschrijving

OpenClaw before 2026.4.22 contains a webhook secret revocation bypass vulnerability allowing callers with old Slack and Zalo webhook secrets to remain active after secrets.reload. Attackers can exploit the stale-secret window to deliver webhook events after operator-expected secret revocation, potentially accepting previous credentials.

← Alle CVE's bekijken Bekijk op cve.org ↗