Security Advisory

CVE-2026-53830

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-06-12 21:56:55

Last updated 2026-06-15 17:23:20

Assigner VulnCheck

CVSS score 6.0

State PUBLISHED

Description

OpenClaw before 2026.4.22 contains a webhook secret revocation bypass vulnerability allowing callers with old Slack and Zalo webhook secrets to remain active after secrets.reload. Attackers can exploit the stale-secret window to deliver webhook events after operator-expected secret revocation, potentially accepting previous credentials.

← Browse all CVEs View on cve.org ↗