Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
OpenClaw before 2026.4.10 contains an authorization bypass vulnerability allowing operator.write message-tool paths to access Matrix profile persistence requiring admin-level authority. Attackers can exploit insufficient access controls to mutate persistent profile configuration through non-owner message-tool runs.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-42433 OpenClaw before 2026.4.10 contains an authorization bypass vulnerability allowing operator.write message-tool paths to access Matrix profile persistence requiring adm… https://www.cve.org/CVERecord?id=CVE-2026-42433
Post summary
CVE‑2026‑42433 identifies an authorization bypass in OpenClaw before 2026.4.10, enabling unauthorized access to Matrix profile persistence, but no PoC, exploit, or patch details are provided.
🚨*CVE* CVE-2026-42433 OpenClaw before 2026.4.10 contains an authorization bypass vulnerability allowing operator.write message-tool paths to access Matrix profile persistence requiring adm… https://www.cve.org/CVERecord?id=CVE-2026-42433 ----- Traducción: CVE-2026-42433 Ope… http://infoflow.cloud`
Post summary
The tweet announces the disclosure of CVE‑2026‑42433 for OpenClaw, describing an authorization bypass that could allow unauthorized access via certain message‑tool paths to Matrix profile persistence.