What is the CVSS score of CVE-2026-28448?

CVE-2026-28448 has a CVSS 3.1 base score of 7.3 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L. EPSS exploitation probability: 0.1%.

Which versions of AI / ML are affected by CVE-2026-28448?

OpenClaw Twitch plugin versions 2026.1.29 through 2026.2.0 contain an authentication bypass that allows unauthorized external Twitch users to trigger agent dispatch when role-based access controls…. A patch is available.

Is there a public PoC exploit available for CVE-2026-28448?

Yes, a public proof-of-concept exploit is available for CVE-2026-28448. Prioritise patching immediately. EPSS: 0.1%.

How to fix or mitigate CVE-2026-28448?

Within 24 hours: Audit current OpenClaw deployments to identify affected versions and Twitch plugin enablement status; immediately disable the Twitch plugin if allowedRoles is not explicitly configured. Within 7 days: Apply vendor patch to upgrade to OpenClaw 2026.2.1 or later and re-enable the plugin with properly configured allowedRoles and allowFrom allowlists. Within 30 days: Conduct access review of all agent dispatch activities during the vulnerability window and implement enhanced logging/alerting for Twitch plugin authentication events.

AI / ML CVE-2026-28448

HIGH

Improper Authorization (CWE-285)

2026-03-05 disclosure@vulncheck.com

GHSA-33rq-m5x2-fvgf

Denial Of Service Authentication Bypass AI / ML Openclaw

7.3

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.3 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

Low

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 22:06 vuln.today

PoC Detected

Mar 11, 2026 - 16:02 vuln.today

Public exploit code

Patch released

Mar 11, 2026 - 16:02 nvd

Patch available

CVE Published

Mar 05, 2026 - 22:16 nvd

HIGH 7.3

DescriptionCVE.org

OpenClaw versions 2026.1.29 prior to 2026.2.1 contain a vulnerability in the Twitch plugin (must be installed and enabled) in which it fails to enforce the allowFrom allowlist when allowedRoles is unset or empty, allowing unauthorized Twitch users to trigger agent dispatch. Remote attackers can mention the bot in Twitch chat to bypass access control and invoke the agent pipeline, potentially causing unintended actions or resource exhaustion.

AnalysisAI

OpenClaw versions before 2026.2.1 fail to properly validate access controls in the Twitch plugin when role restrictions are not configured, allowing unauthenticated remote attackers to trigger agent dispatch through Twitch chat mentions. Public exploit code exists for this vulnerability, enabling attackers to invoke the agent pipeline and potentially cause unintended actions or resource exhaustion. Organizations running affected versions with the Twitch plugin enabled should apply the available patch immediately.

Technical ContextAI

Classified as CWE-285 (Improper Authorization). Affects Openclaw. OpenClaw versions 2026.1.29 prior to 2026.2.1 contain a vulnerability in the Twitch plugin (must be installed and enabled) in which it fails to enforce the allowFrom allowlist when allowedRoles is unset or empty, allowing unauthorized Twitch users to trigger agent dispatch. Remote attackers can mention the bot in Twitch chat to bypass access control and invoke the agent pipeline, potentially causing unintended actions or resource exhaustion.