Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
OpenClaw before 2026.3.31 misclassifies proxied remote requests as loopback connections in the diffs viewer when allowRemoteViewer is disabled, allowing unauthorized access. Attackers can bypass access controls by sending proxied requests that are incorrectly identified as local loopback traffic, circumventing intended remote viewer restrictions.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-41403 OpenClaw Before 2026.3.31 Access Control Bypass via Proxied Request Misclassification https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-41403
Post summary
The post announces CVE-2026-41403, an access‑control bypass in OpenClaw versions before 2026.3.31 caused by proxied request misclassification, with no PoC, exploit, or patch information provided.
CVE-2026-41403 OpenClaw before 2026.3.31 misclassifies proxied remote requests as loopback connections in the diffs viewer when allowRemoteViewer is disabled, allowing unauthorized … https://www.cve.org/CVERecord?id=CVE-2026-41403
Post summary
The tweet discloses that CVE‑2026‑41403 exploits a misclassification in OpenClaw’s diff viewer, enabling unauthorized access, without mentioning patches, PoCs, or active exploitation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | openclaw | openclaw | - | node.js | - |