Exploit discussion active in current signal (3 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
OpenClaw before 2026.3.12 applies rate limiting only after successful webhook authentication, allowing attackers to bypass rate limits and brute-force webhook secrets. Attackers can submit repeated authentication requests with invalid secrets without triggering rate limit responses, enabling systematic secret guessing and subsequent forged webhook submission.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-34505 OpenClaw before 2026.3.12 applies rate limiting only after successful webhook authentication, allowing attackers to bypass rate limits and brute-force webhook secrets… https://www.cve.org/CVERecord?id=CVE-2026-34505
Post summary
The text announces CVE‑2026‑34505, revealing a rate‑limiting bypass in OpenClaw that lets attackers brute‑force webhook secrets.
[CVE-2026-34505: CRITICAL] OpenClaw's vulnerability allows attackers to bypass rate limits by submitting repeated authentication requests with invalid secrets. This flaw enables systematic secret guessing an...#cve,CVE-2026-34505,#cybersecurity https://cvefind.com/CVE-2026-34505
Post summary
The post announces the discovery of a critical OpenClaw vulnerability (CVE‑2026‑34505) that enables attackers to bypass rate limits through repeated bad authentication requests, facilitating systematic secret guessing.
🔴 CVE-2026-34505 - Critical OpenClaw before 2026.3.12 applies rate limiting only after successful webhook authentication, allowing attackers to bypass rate limits and brute-force webhook secrets. Attackers can submi... https://www.thehackerwire.com/vulnerability/CVE-2026-34505/ https://t.co/w5MJnSdO1w
Post summary
The tweet announces CVE-2026-34505, a critical rate‑limiting bypass in OpenClaw pre‑2026.3.12 that lets attackers brute‑force webhook secrets; it references a vulnerability article but offers no PoC code, patch, or evidence of active exploitation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | openclaw | openclaw | - | node.js | - |