Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
OpenClaw before 2026.4.4 contains a race condition vulnerability in shared-secret authentication that allows concurrent asynchronous requests to bypass the per-key rate-limit budget. Attackers can exploit this by sending multiple simultaneous authentication attempts to circumvent intended rate-limiting protections on Tailscale-capable paths.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-41913 Race Condition in OpenClaw Shared-Secret Authentication Bypasses Rate-Limit Budget https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-41913
Post summary
The text announces a new CVE (CVE-2026-41913) describing a race condition in OpenClaw that bypasses shared‑secret authentication and rate‑limit budget.
CVE-2026-41913 OpenClaw before 2026.4.4 contains a race condition vulnerability in shared-secret authentication that allows concurrent asynchronous requests to bypass the per-key ra… https://www.cve.org/CVERecord?id=CVE-2026-41913
Post summary
The text references CVE-2026-41913, outlining a race condition in OpenClaw’s shared‑secret authentication that permits concurrent requests to bypass per‑key enforcement; it does not provide proof of exploitation, a PoC, or patch details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | openclaw | openclaw | - | node.js | - |