CVE-2026-43575Disclosure(openclaw / openclaw)

LOWCVSS 9.2 · CRITICAL

Signal is active with 4 mentions in latest observed window

Immediate actions

Patch openclaw openclaw systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

OpenClaw versions 2026.2.21 before 2026.4.10 contain an authentication bypass vulnerability in the sandbox noVNC helper route that exposes interactive browser session credentials. Attackers can access the noVNC helper route without bridge authentication to gain unauthorized access to the interactive browser session.

openclaw CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Patch / fix

https://github.com/openclaw/openclaw/commit/8dfbf3268bd224b7377d1ecca77a445100746085

Vendor / third-party advisories

Weakness type (CWE)

CWE-862

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

openclaw

Threat summary

Patch or workaround signal is available
8 mentions across 3 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 2 signals
Technical details provided in 7 signals
Disclosure: 6 classified signals
General: 1 classified signal
Peaked at 4 mentions on most recent observed day (2026-05-14)
8 total mentions across 3 days

Affected systems

Vendors

openclaw

Products

openclaw

Deep dive

Activity timeline8 mentions / 3d

Signal classification3 categories

Disclosure

675.0%

Patch

112.5%

General

112.5%

Referenced assets8 URLs

By indicator

Classification over time

Date	Total	Labels

2026-05-06	1	Disclosure1
2026-05-07	3	Disclosure2Patch1
2026-05-14	4	Disclosure3General1

Full discourse8 posts

Lyrie.ai@lyrie_ai147d
Disclosure
CVE: CVE-2026-43575 CVSS: 9.8 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Severity: CRITICAL Status: Critical advisory OpenClaw versions 2026.2.21 before 2026.4.10 contain an authentication bypass vulnerability in the sandbox noVNC helper route that exposes…
Post summary
The advisory details a critical authentication bypass in OpenClaw versions 2026.2.21 through 2026.4.09, with CVSS 9.8, but does not include PoC or exploit info; a newer version likely fixes the issue.
1000034
210 followersView on X
Lyrie.ai@lyrie_ai147d
Disclosure
References CVE: CVE-2026-43575 CVSS: 9.8 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Severity: CRITICAL Status: Critical advisory
Post summary
The advisory lists CVE‑2026‑43575 with a critical CVSS score, but it does not mention any PoC, exploit tool, active attacks, or mitigation steps.
1000025
210 followersView on X
Lyrie.ai@lyrie_ai147d
Disclosure
CRITICAL: CVE-2026-43575 (CVSS 9.8) — multiple products. CVE: CVE-2026-43575 CVSS: 9.8 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Severity: CRITICAL Status: Critical advisory
Post summary
A critical advisory for CVE-2026-43575 is issued, noting a CVSS score of 9.8 and CRITICAL severity across multiple products, but no exploitation, tool, or remediation details are provided.
1000029
210 followersView on X
Orizon@OrizonCyber154d
Disclosure
🚨 CVE-2026-43575 — CVSS 9.8/10 ██████████ OpenClaw versions 2026.2.21 before 2026.4.10 contain an authentication bypass vulnerability in the sandbox noVNC helper... Severity: CRITICAL Patch now. #cybersecurity #CVE https://t.co/XxuaLQwFwU
Post summary
The tweet announces CVE‑2026‑43575 as a critical authentication bypass in OpenClaw's noVNC sandbox helper, indicates a CVSS score of 9.8, and notes that a patch is now available.
10000111
28 followersView on X
Lyrie.ai@lyrie_ai147d
General
https://lyrie.ai/research/research/cve-2026-43575-advisory #lyrie #cybersecurity #CVE #threatintel #zerodayattack
Post summary
The post only references a URL and hashtags, offering no substantive information about the CVE, its exploitation status, or mitigation.
0000019
210 followersView on X
CVE@CVEnew154d
Disclosure
CVE-2026-43575 OpenClaw versions 2026.2.21 before 2026.4.10 contain an authentication bypass vulnerability in the sandbox noVNC helper route that exposes interactive browser session… https://www.cve.org/CVERecord?id=CVE-2026-43575
Post summary
OpenClaw versions 2026.2.21 up to 2026.4.10 suffer an authentication bypass in the sandbox noVNC helper route, exposing interactive browser sessions.
0000084
57.4K followersView on X
PurpleOps@PurpleOps_io154d
Patch
Patch Priority: Gotenberg metadata handling flaw with likely internet exposure (CVSS 9.6-10.0) Affected: Gotenberg; Vvveb; OpenClaw Internet-facing exposure and authentication bypasses drive today's critical CVEs across containerized and web-app stacks. CVE-2026-40281 (CVSS 10.0) Gotenberg before 8.30.2 (8.30.1 and earlier) contains a metadata handling flaw in which unsanitized metadata values can trigger ExifTool injection, enabling renaming or moving PDFs to arbitrary paths within the container. https://github.com/gotenberg/gotenberg/commit/405f1069c026bb08f319fb5a44e5c67c33208318 CVE-2026-44109 (CVSS 9.8) OpenClaw before 2026.4.15 has an authentication bypass in Feishu webhook and card-action validation, enabling unauthenticated requests to reach command dispatch and potentially bypass signature verification and replay protections. https://github.com/openclaw/openclaw/commit/c8003f1b33ed2924be5f62131bd28742c5a41aae CVE-2026-43575 (CVSS 9.8) OpenClaw before 2026.4.10 contains an authentication bypass in the sandbox noVNC helper route that exposes interactive browser session credentials. https://github.com/openclaw/openclaw/commit/19a2e9ddb5a8a494abcba812bb11f51075026a27 CVE-2026-41930 (CVSS 9.8) Vvveb before 1.0.8.2 ships with hard-coded credentials in docker-compose-apache.yaml, allowing unauthenticated access to the bundled phpMyAdmin container and its database credentials. https://github.com/givanz/Vvveb/commit/f85ca7c2bc389bda3cc2eca87b2514581a628c32 CVE-2026-43581 (CVSS 9.6) OpenClaw before 2026.4.10 has an improper network binding that exposes Chrome DevTools Protocol on 0.0.0.0, enabling access from outside the intended local sandbox. https://github.com/openclaw/openclaw/commit/fbf11ebdb7110632f93926d0ac7b48f04cb44d77 🛠️ Action • Patch/upgrade affected components to fixed versions or the latest vendor advisories. • Prioritize internet-facing instances and edge appliances first. • If no fix yet, apply mitigations such as restricting access or disabling vulnerable features. • Add detections for exploitation patterns: metadata injection attempts, auth bypass, and unauthorized DevTools access. • Hunt for indicators around the affected services during disclosure-to-now window (logs, EDR, WAF). • Validate remediation (version checks, config verification) and monitor for reversion.
Post summary
The post details several high‑severity CVEs affecting Gotenberg, OpenClaw, and Vvveb, provides technical vulnerability details, and emphasizes patching/upgrading with accompanying mitigations.
0000063
103 followersView on X
Vulmon Vulnerability Feed@VulmonFeeds154d
Disclosure
CVE-2026-43575 Authentication Bypass in OpenClaw Sandbox noVNC Helper Route Versions 2026.2.21 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-43575
Post summary
The text announces an authentication bypass in OpenClaw Sandbox’s noVNC Helper, offering technical details but no PoC, exploit code, patch, or active exploitation evidence.
0000043
4.0K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	openclaw	openclaw	-	node.js	-

Explore more

Back to dashboard openclaw CVEs openclaw vulnerabilities

What researchers are saying

CVE-2026-43575

Lyrie.ai[verified]@lyrie_aiDisclosure

The advisory details a critical authentication bypass in OpenClaw versions 2026.2.21 through 2026.4.09, with CVSS 9.8, but does not include PoC or exploit info; a newer version likely fixes the issue.

Lyrie.ai[verified]@lyrie_aiDisclosure

The advisory lists CVE‑2026‑43575 with a critical CVSS score, but it does not mention any PoC, exploit tool, active attacks, or mitigation steps.

Lyrie.ai[verified]@lyrie_aiDisclosure

A critical advisory for CVE-2026-43575 is issued, noting a CVSS score of 9.8 and CRITICAL severity across multiple products, but no exploitation, tool, or remediation details are provided.

Orizon[verified]@OrizonCyberDisclosure

The tweet announces CVE‑2026‑43575 as a critical authentication bypass in OpenClaw's noVNC sandbox helper, indicates a CVSS score of 9.8, and notes that a patch is now available.

Lyrie.ai[verified]@lyrie_aiGeneral

The post only references a URL and hashtags, offering no substantive information about the CVE, its exploitation status, or mitigation.

PurpleOps[verified]@PurpleOps_ioPatch

The post details several high‑severity CVEs affecting Gotenberg, OpenClaw, and Vvveb, provides technical vulnerability details, and emphasizes patching/upgrading with accompanying mitigations.

CVE@CVEnewDisclosure

OpenClaw versions 2026.2.21 up to 2026.4.10 suffer an authentication bypass in the sandbox noVNC helper route, exposing interactive browser sessions.

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

The text announces an authentication bypass in OpenClaw Sandbox’s noVNC Helper, offering technical details but no PoC, exploit code, patch, or active exploitation evidence.