Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
OpenClaw versions prior to 2026.2.25 contain an authentication hardening gap in browser-origin WebSocket clients that allows attackers to bypass origin checks and auth throttling on loopback deployments. An attacker can trick a user into opening a malicious webpage and perform password brute-force attacks against the gateway to establish an authenticated operator session and invoke control-plane methods.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-32025 OpenClaw versions prior to 2026.2.25 contain an authentication hardening gap in browser-origin WebSocket clients that allows attackers to bypass origin checks and aut… https://www.cve.org/CVERecord?id=CVE-2026-32025
Post summary
The post cites CVE-2026-32025, highlighting an authentication gap that permits origin check bypass in OpenClaw’s WebSocket clients, but does not offer PoC code, exploit details, or patch information.
CVE Alert: CVE-2026-32025 - OpenClaw - OpenClaw - https://www.redpacketsecurity.com/cve-alert-cve-2026-32025-openclaw-openclaw/ #OSINT #ThreatIntel #CyberSecurity #cve-2026-32025 #openclaw #
Post summary
A brief CVE alert for CVE-2026-32025 (OpenClaw) that links to an external site, without providing PoC, exploit, active use, patch, or technical details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | openclaw | openclaw | - | node.js | - |