Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
OpenClaw versions prior to 2026.3.1 fail to properly handle authentication bootstrap errors during startup, allowing browser-control routes to remain accessible without authentication. Local processes or loopback-reachable SSRF paths can exploit this to access browser-control routes including evaluate-capable actions without valid credentials.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
🔵 OpenClaw (Tailscale path), Concurrent async auth race condition, #CVE-2026-32041 (Low severity) https://dailycve.com/openclaw-tailscale-path-concurrent-async-auth-race-condition-cve-2026-32041-low-severity/
Post summary
The text announces a low‑severity concurrent async authentication race condition in Tailscale’s OpenClaw path, without offering a PoC, exploit, patch, or evidence of active exploitation.
A high-severity authentication bypass (CVE-2026-32041) affects `OpenClaw`, allowing unauthenticated browser control after auth failure. Review `OpenClaw` exposure. #InfoSec #AuthBypass #Vulnerability https://www.pulsepatch.io/posts/cve-2026-32041-openclaw-auth-bypass
Post summary
The text announces a newly disclosed high‑severity authentication bypass in OpenClaw, detailing its nature but lacking PoC, exploit code, or patch information.
CVE-2026-32041 OpenClaw versions prior to 2026.3.1 fail to properly handle authentication bootstrap errors during startup, allowing browser-control routes to remain accessible witho… https://www.cve.org/CVERecord?id=CVE-2026-32041
Post summary
The snippet announces CVE-2026-32041, describing how early OpenClaw versions mishandle authentication bootstrap errors and leave browser‑control routes exposed, but does not mention a PoC, exploit, patch, or active exploitation evidence.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | openclaw | openclaw | - | node.js | - |