Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
OpenClaw before 2026.4.15 contains an authorization bypass vulnerability in Matrix room control-command authorization that trusts DM pairing-store entries. Attackers with DM-paired sender IDs can execute room control commands without being in configured allowlists by posting in bot rooms, potentially enabling privileged OpenClaw behavior.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-44110 OpenClaw before 2026.4.15 contains an authorization bypass vulnerability in Matrix room control-command authorization that trusts DM pairing-store entries. Attackers … https://www.cve.org/CVERecord?id=CVE-2026-44110
Post summary
A newly disclosed authorization bypass vulnerability (CVE‑2026‑44110) in OpenClaw’s Matrix integration, affecting versions prior to 2026.4.15.
CVE-2026-44110 Authorization Bypass in OpenClaw Before 2026.4.15 via DM Pairing-Store Trust https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-44110
Post summary
The text announces a new authorization bypass vulnerability (CVE-2026-44110) affecting OpenClaw versions prior to 2026.4.15, but provides no Proof of Concept, exploit code, or patch information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | openclaw | openclaw | - | node.js | - |