What is the CVSS score of CVE-2026-28469?

CVE-2026-28469 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N. EPSS exploitation probability: 0.0%.

Which versions of Industrial are affected by CVE-2026-28469?

Openclaw versions through 2026.2.14 contain an authorization bypass vulnerability that could allow attackers to access resources or functionality they are not entitled to.. A patch is available.

How to fix or mitigate CVE-2026-28469?

Within 24 hours: Inventory all Openclaw instances and identify those running version 2026.2.14 or earlier. Within 7 days: Apply the available vendor patch to all affected systems, prioritizing production environments. Within 30 days: Conduct access logs review for the past 30 days to identify potential exploitation and validate patch deployment across all systems.

Industrial CVE-2026-28469

HIGH

Authorization Bypass Through User-Controlled Key (CWE-639)

2026-03-05 disclosure@vulncheck.com

GHSA-rq6g-px6m-c248

Industrial Openclaw

7.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

None

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 22:06 vuln.today

Patch released

Mar 09, 2026 - 20:29 nvd

Patch available

CVE Published

Mar 05, 2026 - 22:16 nvd

HIGH 7.5

DescriptionCVE.org

OpenClaw versions prior to 2026.2.14 contain a webhook routing vulnerability in the Google Chat monitor component that allows cross-account policy context misrouting when multiple webhook targets share the same HTTP path. Attackers can exploit first-match request verification semantics to process inbound webhook events under incorrect account contexts, bypassing intended allowlists and session policies.

AnalysisAI

Openclaw versions up to 2026.2.14 is affected by authorization bypass through user-controlled key (CVSS 7.5).

Technical ContextAI

This vulnerability (CWE-639: Authorization Bypass Through User-Controlled Key) exists in the Google Chat monitor component. OpenClaw versions prior to 2026.2.14 contain a webhook routing vulnerability in the Google Chat monitor component that allows cross-account policy context misrouting when multiple webhook targets share the same HTTP path. Attackers can exploit first-match request verification semantics to process inbound webhook events under incorrect account contexts, bypassing intended allowlists and session policies.

RemediationAI

A vendor patch is available — apply it immediately. Restrict network access to the affected service where possible.

More in Industrial

View all

CVE-2025-63624 CRITICAL Act Now POC

9.8 Feb 03

Kede Electronics IoT smart water meter monitoring platform v1.0 has a SQL injection allowing attackers to compromise the

CVE-2026-24857 CRITICAL Act Now POC

9.8 Jan 28

bulk_extractor digital forensics tool starting from version 1.4 has a heap buffer overflow in its embedded unrar code th

CVE-2026-23519 CRITICAL Act Now POC

9.8 Jan 15

RustCrypto CMOV before 0.4.4 emits non-constant-time assembly on ARM Cortex-M0/M0+/M1 targets. Cryptographic operations

CVE-2021-47881 HIGH This Week POC

8.4 Jan 23

dataSIMS Avionics ARINC 664-1 version 4.5.3 contains a local buffer overflow vulnerability that allows attackers to over

CVE-2026-22850 HIGH This Week POC

8.3 Jan 19

SQL injection in Koko Analytics for WordPress prior to version 2.1.3 allows unauthenticated attackers to inject maliciou

CVE-2026-22700 HIGH This Week POC

7.5 Jan 10

RustCrypto's SM2 elliptic curve implementation in versions 0.14.0-pre.0 and 0.14.0-rc.0 is vulnerable to denial-of-servi

CVE-2026-26025 HIGH This Week POC

7.5 Feb 24

free5GC SMF versions up to 1.4.1 crash when receiving malformed PFCP SessionReportRequest packets on UDP port 8805, allo

CVE-2026-26024 HIGH This Week POC

7.5 Feb 24

free5GC SMF versions up to 1.4.1 crash when processing malformed PFCP SessionReportRequest messages on the UDP/8805 inte

CVE-2026-25501 HIGH This Week POC

7.5 Feb 24

free5GC SMF versions up to 1.4.1 crash when processing malformed PFCP SessionReportRequest messages on the PFCP interfac

CVE-2019-25291 HIGH This Week POC

7.5 Jan 08

INIM Electronics Smartliving SmartLAN/G/SI <=6.x contains hard-coded credentials in its Linux distribution image that ca

CVE-2026-22689 MEDIUM This Month POC

6.5 Jan 10

Mailpit versions up to 1.28.2 contains a vulnerability that allows attackers to intercept sensitive data such as email c

CVE-2025-64075 CRITICAL Act Now

10.0 Feb 11

Authentication bypass via path traversal in ZBT WE2001 router's check_token function. EPSS 0.69% — crafted requests bypa

Same weakness CWE-639 – Authorization Bypass Through User-Controlled Key

View all

CVE-2024-50483 CRITICAL

9.8

CVE-2026-55255 HIGH POC

8.4

CVE-2025-3605 CRITICAL POC

9.8

CVE-2022-3805 HIGH POC

8.6

CVE-2025-5947 CRITICAL POC

9.8

CVE-2020-36923 CRITICAL POC

9.8

CVE-2023-3048 CRITICAL POC

9.8

CVE-2024-27730 CRITICAL POC

9.8

CVE-2026-28469 vulnerability details – vuln.today

Back

Industrial CVE-2026-28469

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Technical ContextAI

RemediationAI

More in Industrial

Same weakness CWE-639 – Authorization Bypass Through User-Controlled Key

Share

External POC / Exploit Code