Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
OpenClaw versions prior to 2026.2.21 incorrectly apply tokenless Tailscale header authentication to HTTP gateway routes, allowing bypass of token and password requirements. Attackers on trusted networks can exploit this misconfiguration to access HTTP gateway routes without proper authentication credentials.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
AI systems often rely on token-based authentication. A common bug is improper handling of missing or malformed tokens. For example, CVE-2026-32045 shows OpenClaw incorrectly applying "tokenless Tailscale header authentication."
Post summary
The passage discloses that CVE-2026-32045 involves OpenClaw incorrectly applying tokenless Tailscale header authentication, illustrating improper token handling.
CVE-2026-32045 OpenClaw versions prior to 2026.2.21 incorrectly apply tokenless Tailscale header authentication to HTTP gateway routes, allowing bypass of token and password require… https://www.cve.org/CVERecord?id=CVE-2026-32045
Post summary
OpenClaw versions earlier than 2026.2.21 mishandle tokenless Tailscale headers on HTTP gateway routes, enabling authentication bypass as documented in CVE‑2026‑32045.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | openclaw | openclaw | - | node.js | - |