Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
OpenClaw versions 2026.2.14 through 2026.3.24 fail to consistently apply guild and channel policy gates to Discord button and component interactions. Attackers can trigger privileged component actions from blocked contexts by bypassing channel policy enforcement.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-41367 Policy Gate Bypass in OpenClaw 2026.2.14 Through 2026.3.24 Discord Components https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-41367
Post summary
A new policy gate bypass vulnerability (CVE-2026-41367) has been disclosed for OpenClaw versions 2026.2.14 through 2026.3.24, with a link to further details but no PoC, exploit, or patch information provided.
⚡ New CVE Alert: CVE-2026-41367 📊 Severity: 5.0 🚨 Risk Level: Medium 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-41367 #CVE-2026-41367 #CVE #Medium #CyberSecurity #InfoSec https://t.co/g5ackmXo89
Post summary
The tweet announces the existence of CVE-2026-41367 with a medium severity rating and provides a link to the NVD entry, but offers no further technical, exploit, or mitigation details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | openclaw | openclaw | - | node.js | - |