Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
OpenClaw before 2026.3.31 contains a sender allowlist bypass vulnerability that allows remote attackers to access restricted messages. Attackers can exploit fetched quoted, root, and thread context messages to bypass sender allowlist restrictions and retrieve unauthorized content.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-04-28 | 1 | Disclosure1 |
| 2026-04-29 | 1 | General1 |
CVE-2026-41406 Sender Allowlist Bypass Vulnerability in OpenClaw Before 2026.3.31 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-41406
Post summary
The text announces CVE-2026-41406, a sender allowlist bypass issue in OpenClaw versions prior to 2026.3.31, but provides no further details on exploits, patches, or active exploitation.
CVE-2026-41406 OpenClaw before 2026.3.31 contains a sender allowlist bypass vulnerability that allows remote attackers to access restricted messages. Attackers can exploit fetched q… https://www.cve.org/CVERecord?id=CVE-2026-41406
Post summary
The message announces CVE-2026-41406, noting a sender allowlist bypass that permits remote message access, without evidence of exploitation, PoC, or patch.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | openclaw | openclaw | - | node.js | - |