Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
OpenClaw before 2026.4.12 contains an improper authorization vulnerability in helper-backed channels where empty resolved approver lists are interpreted as explicit approval authorization. Attackers can resolve pending approvals without proper authorization by exploiting this logic flaw if they know an approval id.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-43574 Improper Authorization in OpenClaw Before 2026.4.12 Helper-Backed Channels https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-43574
Post summary
The text announces the discovery of an improper authorization flaw in OpenClaw’s helper‑backed channels, providing the CVE identifier and a brief technical description, but offers no proof‑of‑concept, exploit code, or active exploitation evidence.
CVE-2026-43574 OpenClaw before 2026.4.12 contains an improper authorization vulnerability in helper-backed channels where empty resolved approver lists are interpreted as explicit a… https://www.cve.org/CVERecord?id=CVE-2026-43574
Post summary
CVE‑2026‑43574 is an improper authorization flaw in OpenClaw before 2026.4.12, affecting helper‑backed channels; the post only links to the CVE record and provides no PoC, exploit, patch, or evidence of active exploitation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | openclaw | openclaw | - | node.js | - |