Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
OpenClaw before 2026.3.31 (patched in 2026.4.8) contains a request body replay vulnerability in fetchWithSsrFGuard that allows unsafe request bodies to be resent across cross-origin redirects. Attackers can exploit this by triggering redirects to exfiltrate sensitive request data or headers to unintended origins.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
🟠 OpenClaw, Node Pairing Reconnect Command Escalation, #CVE-2026-40037 (Medium) https://dailycve.com/openclaw-node-pairing-reconnect-command-escalation-cve-2026-40037-medium/
Post summary
The post announces a new Medium‑severity vulnerability in OpenClaw’s Node Pairing Reconnect command, highlighting the type of escalation, but offers no evidence of active exploitation, PoC, or patch.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | openclaw | openclaw | - | node.js | - |