Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
OpenClaw versions 2026.2.19 before 2026.3.31 contain an improper cache isolation vulnerability in the Zalo webhook replay-dedupe mechanism that is shared across authenticated webhook targets. Attackers controlling one authenticated Zalo webhook path in multi-account deployments can suppress legitimate events on different accounts by matching event_name and message_id parameters.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-41362 Improper Cache Isolation in OpenClaw Zalo Webhook Replay-Dedupe Mechanism https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-41362
Post summary
The post references CVE‑2026‑41362 and briefly describes an improper cache isolation issue in OpenClaw Zalo’s webhook replay‑dedup mechanism. No further information on PoC, exploitation, patches, or active use is provided.
⚡ New CVE Alert: CVE-2026-41362 📊 Severity: 4.3 🚨 Risk Level: Medium 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-41362 #CVE-2026-41362 #CVE #Medium #CyberSecurity #InfoSec https://t.co/Ncz7sNfFQt
Post summary
The tweet merely informs of CVE‑2026‑41362, providing its severity rating and a link to NVD, without detailing technical aspects, exploits, or patches.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | openclaw | openclaw | - | node.js | - |