Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
OpenClaw before 2026.3.31 contains a sender allowlist bypass vulnerability in MS Teams thread history fetched via Graph API. Attackers can retrieve thread messages that should be filtered by sender allowlists, bypassing message filtering restrictions.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-41365 Sender Allowlist Bypass in OpenClaw Before 2026.3.31 MS Teams Integration https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-41365
Post summary
This brief notice identifies CVE-2026-41365 as a sender allowlist bypass in OpenClaw prior to the 2026.3.31 MS Teams integration, but it offers no proof‑of‑concept, exploit code, patch information, or evidence of ongoing exploitation.
⚡ New CVE Alert: CVE-2026-41365 📊 Severity: 5.4 🚨 Risk Level: Medium 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-41365 #CVE-2026-41365 #CVE #Medium #CyberSecurity #InfoSec https://t.co/trXXIbRDia
Post summary
A brief tweet announces CVE-2026-41365 with basic severity data, but offers no technical, exploit, or mitigation details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | openclaw | openclaw | - | node.js | - |