VulnSocial

CVE-2026-32914Disclosure(openclaw / openclaw)

LOWCVSS 8.7 · HIGH

Signal is active with 3 mentions in latest observed window

Immediate actions

  • Patch openclaw openclaw systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

OpenClaw before 2026.3.12 contains an insufficient access control vulnerability in the /config and /debug command handlers that allows command-authorized non-owners to access owner-only surfaces. Attackers with command authorization can read or modify privileged configuration settings restricted to owners by exploiting missing owner-level permission checks.

openclaw CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-863

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • openclaw

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 3 signals
  • Disclosure: 1 classified signal
  • General: 1 classified signal
  • 3 total mentions across 1 day

Affected systems

Vendors
openclaw
Products
openclaw

Deep dive

Activity timeline3 mentions / 1d
01223Mentions · 2026-03-29: 3Patch / Workaround · 2026-03-29: 1Technical Details · 2026-03-29: 303-29
Signal classification3 categories
Disclosure
133.3%
General
133.3%
Patch
133.3%
Referenced assets3 URLs
Full discourse3 posts
  • CVEFind.com@CveFindCom
    Patch

    [CVE-2026-32914: HIGH] OpenClaw has a cyber security vulnerability that allows unauthorized access to owner-only surfaces via /config and /debug commands. Ensure security by updating prior to 2026.3.12.#cve,CVE-2026-32914,#cybersecurity https://cvefind.com/CVE-2026-32914

    Post summary

    The post highlights CVE‑2026‑32914 as a high‑severity flaw that permits unauthorized access through specific commands and recommends updating to version 2026.3.12 to remediate it.

    0000145
    617 followersView on X
  • CVE@CVEnew
    General

    CVE-2026-32914 OpenClaw before 2026.3.12 contains an insufficient access control vulnerability in the /config and /debug command handlers that allows command-authorized non-owners t… https://www.cve.org/CVERecord?id=CVE-2026-32914

    Post summary

    The statement offers only a brief technical description of the CVE without any evidence of exploitation, patch, or false‑positive claim.

    0001088
    56.9K followersView on X
  • The Hacker Wire@TheHackerWire
    Disclosure

    🟠 CVE-2026-32914 - High OpenClaw before 2026.3.12 contains an insufficient access control vulnerability in the /config and /debug command handlers that allows command-authorized non-owners to access owner-only surfa... https://www.thehackerwire.com/vulnerability/CVE-2026-32914/ https://t.co/ZoOzqBFrTk

    Post summary

    The post is a straightforward disclosure of CVE‑2026‑32914, describing an access‑control flaw in OpenClaw's command handlers, without any evidence of exploitation, mitigation, or PoC.

    0000068
    163 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appopenclawopenclaw-node.js-

Explore more

Back to dashboardopenclaw CVEsopenclaw vulnerabilities