Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
OpenClaw before 2026.3.31 contains an incomplete scope-clearing vulnerability in trusted-proxy authentication mode that allows operator.admin privilege escalation. Attackers can exploit this by declaring operator scopes on non-Control-UI clients, allowing self-declared scopes to persist on identity-bearing authentication paths and escalate privileges.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-41404 Privilege Escalation via Incomplete Scope Clearing in OpenClaw Before 2026.3.31 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-41404
Post summary
The post announces CVE‑2026‑41404, a privilege‑escalation vulnerability affecting OpenClaw versions prior to 2026.3.31, without providing PoC, exploitation, or patch details.
CVE-2026-41404 OpenClaw before 2026.3.31 contains an incomplete scope-clearing vulnerability in trusted-proxy authentication mode that allows operator.admin privilege escalation. At… https://www.cve.org/CVERecord?id=CVE-2026-41404
Post summary
The text discloses CVE-2026-41404, detailing a privilege escalation flaw in OpenClaw's trusted‑proxy authentication mode.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | openclaw | openclaw | - | node.js | - |