Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
OpenClaw is a personal AI assistant. Prior to version 2026.2.14, under iMessage `groupPolicy=allowlist`, group authorization could be satisfied by sender identities coming from the DM pairing store, broadening DM trust into group contexts. Version 2026.2.14 fixes the issue.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-26328 OpenClaw is a personal AI assistant. Prior to version 2026.2.14, under iMessage `groupPolicy=allowlist`, group authorization could be satisfied by sender identities c… https://www.cve.org/CVERecord?id=CVE-2026-26328
Post summary
The text discloses a group authorization flaw in OpenClaw’s iMessage functionality that existed before version 2026.2.14, but no PoC, exploit, or patch details are provided.
⚡ New CVE Alert: CVE-2026-26328 📊 Severity: 6.5 🚨 Risk Level: Medium 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-26328 #CVE-2026-26328 #CVE #Medium #CyberSecurity #InfoSec https://t.co/6Tkqw3Fwjt
Post summary
A new CVE (CVE-2026-26328) is announced with medium severity, affecting multiple products; no exploit, patch, or detailed technical info is provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | openclaw | openclaw | - | node.js | - |