EUVD-2026-21464Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A08:2025 - Software or Data Integrity Failures
ASVS 5.0
V15 - Secure Coding and Architecture Data authenticity verification
|
| Impact | CVSS 4.6 with attack vector Adjacent (AV:A), low complexity (AC:L), no privilege requirement (PR:N), but requires user interaction (UI:R) indicates a moderate local-network threat with limited immediate impact. The CVSS vector shows limited confidentiality and integrity impact (C:L, I:L) and no availability impact (A:N). EPSS data is not provided, but the adjacent-network-only attack surface and user interaction requirement significantly limit real-world exploitation probability compared to the CVSS base score suggests. However, on networks where OpenClaw is actively used (engineering, distributed systems teams), an attacker positioned on the same network segment could reliably trigger routing misconfigurations. The information disclosure and integrity compromise components (routing hijacking) pose tangible risk in environments where OpenClaw coordinates service discovery for critical workflows. This is a credible local-network attack rather than a broadly critical remote issue. |
| Exploit ScenarioDerived | An attacker positioned on the same network segment (adjacent network, e.g., shared WiFi or Ethernet subnet) crafts malicious DNS-SD TXT records advertising a fake OpenClaw service. A legitimate OpenClaw user or administrator queries for services, and the vulnerable application processes the malicious metadata to redirect its CLI routing to an attacker-controlled endpoint, allowing interception or manipulation of configuration data. No authentication is required from the attacker's perspective; user interaction (clicking or running a discovery-based command) is necessary. No public exploit code or confirmed active exploitation is identified in the provided data. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Apr 10, 2026
OpenClaw before version 2026.3.22 accepts unresolved Bonjour and DNS-SD service discovery metadata to influence CLI routing decisions, allowing attackers on adjacent networks to redirect traffic to attacker-controlled targets through malicious TXT records. The vulnerability requires user interaction and adjacent network access but can cause information disclosure and integrity compromise without authentication.
RemediationAI
Upgrade OpenClaw to version 2026.3.22 or later. Vendor-released patch is available; upstream fixes are documented in commits 630f1479c44f78484dfa21bb407cbe6f171dac87 and deecf68b59a9b7eea978e40fd3c2fe543087b569 on GitHub. Until patched, operators should restrict network access to systems running OpenClaw and avoid using Bonjour/DNS-SD service discovery on untrusted network segments, or disable automatic service discovery if alternative configuration methods are available. See the GitHub security advisory at https://github.com/openclaw/openclaw/security/advisories/GHSA-rvqr-hrcc-j9vv for detailed mitigation options.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in npm
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
The vulnerability stems from CWE-345 (Insufficient Verification of Data Authenticity), where OpenClaw's CLI routing logic trusts Bonjour/DNS-SD TXT metadata even when service resolution fails. Bonjour and DNS-SD are zero-configuration networking protocols that advertise services via multicast DNS. The flaw allows an attacker to craft malicious DNS-SD discovery packets containing falsified service metadata (TXT records) that influence routing decisions despite the underlying service never resolving to a valid endpoint. This is a logic flaw in the service discovery trust chain-the application acts on hints without proper endpoint validation. The affected product OpenClaw (cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:*:*:*) versions prior to 2026.3.22 are vulnerable.
Know when Openclaw gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
2DescriptionCVE.org
OpenClaw before 2026.3.22 contains a service discovery vulnerability where TXT metadata from Bonjour and DNS-SD could influence CLI routing even when actual service resolution failed. Attackers can exploit unresolved hints to steer routing decisions to unintended targets by providing malicious discovery metadata.
Blast Radius
ecosystem impact- 5 npm packages depend on openclaw (5 direct, 0 indirect)
Ecosystem-wide dependent count for version 2026.3.22.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
GitHub
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Information disclosure occurs when an application unintentionally exposes sensitive data that aids attackers in reconnaissance or directly compromises security.
Related Vulnerabilities in OpenClaw Multiple Authorization and Privilege Escalation
View all 29Auth bypass in OpenClaw voice-call extension before 2026.2.1. EPSS 0.68%. PoC and patch available.
Privilege escalation in OpenClaw (pre-2026.3.28) allows unauthenticated remote attackers to gain administrative access b
OpenClaw versions 2026.2.22 through 2026.2.24 contain a privilege escalation vulnerability that allows authenticated att
An authorization mismatch vulnerability in OpenClaw versions prior to 2026.3.1 allows authenticated users with operator.
OpenClaw versions prior to 2026.1.29 automatically establish WebSocket connections to attacker-controlled gateway URLs e
Path traversal in OpenClaw through version 2026.3.23 enables unauthenticated remote attackers to read arbitrary files in
Authentication bypass in OpenClaw before 2026.5.3 allows remote attackers with low privileges to receive agent responses
Directory-context bypass in OpenClaw before 2026.8.1 allows authenticated attackers with user interaction to reuse an 'a
Unauthenticated access to the noVNC observer interface in OpenClaw's Docker sandbox browser allows anyone who can reach
OpenClaw versions before 2026.2.26 allow authenticated attackers to write arbitrary files outside the workspace director
OpenClaw versions prior to 2026.2.22 contain a shell environment variable injection vulnerability in the system.run func
OpenClaw versions prior to 2026.2.22 contain a resource exhaustion vulnerability where the application fails to consiste
Exploit-DB