Skip to main content

Openclaw CVE-2026-41331

MEDIUM
Incorrect Behavior Order: Early Amplification (CWE-408)
2026-04-21 disclosure@vulncheck.com
Authentication Bypass Openclaw
6.9
CVSS 4.0 · NVD
Share

Severity by source

NVD PRIMARY
6.9 MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
X

Lifecycle Timeline

4
Patch released
Apr 21, 2026 - 02:30 nvd
Patch available
Analysis Generated
Apr 21, 2026 - 00:40 vuln.today
Analysis Generated
Apr 21, 2026 - 00:22 vuln.today
CVE Published
Apr 21, 2026 - 00:16 nvd
MEDIUM 6.9

Blast Radius

ecosystem impact
† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth
  • 1 npm packages depend on openclaw (1 direct, 0 indirect)

Ecosystem-wide dependent count for version 2026.3.31.

DescriptionCVE.org

OpenClaw before 2026.3.31 contains a resource consumption vulnerability in Telegram audio preflight transcription that allows unauthorized group senders to trigger transcription processing. Attackers can exploit insufficient allowlist enforcement to cause resource or billing consumption by initiating audio preflight operations before authorization checks are applied.

AnalysisAI

OpenClaw before version 2026.3.31 allows unauthenticated remote attackers to trigger resource-intensive audio transcription processing via Telegram without proper authorization, enabling denial-of-service through billing or infrastructure exhaustion. The vulnerability stems from insufficient allowlist enforcement that permits unauthorized group senders to initiate preflight transcription operations before authentication is validated, and no public exploit code has been identified at the time of analysis.

Technical ContextAI

OpenClaw's Telegram audio handling implements a preflight transcription mechanism intended to optimize audio processing workflows. The vulnerability exists in the authorization enforcement layer (CWE-408: Improper Handling of Uncaught Exception) where transcription processing is initiated before sufficient validation of sender permissions occurs. Attackers exploit this ordering flaw by sending crafted Telegram audio messages that bypass the allowlist checks, forcing the system to allocate computational resources (transcription engines) and potentially incur cloud API costs before the request is rejected. The root cause is premature resource commitment-the system allocates and consumes resources during preflight validation rather than validating authorization first, then allocating resources only for authorized requests.

RemediationAI

Upgrade OpenClaw to version 2026.3.31 or later. The upstream fix (GitHub commit c4fa8635d03943ffe9e294d501089521dca635c5) relocates authorization checks to occur before any transcription resource allocation. If immediate patching is not possible, implement these compensating controls: (1) Disable Telegram audio preflight transcription feature in OpenClaw configuration (trading transcription optimization for security; impact: slower audio processing), (2) Restrict Telegram group memberships to whitelisted users only via Telegram privacy settings (limits attack surface but reduces collaborative features), (3) Implement rate-limiting at the OpenClaw application level to throttle audio transcription requests per sender/group (side effect: may delay legitimate requests during legitimate traffic spikes), (4) Enable cost alerting and API quota enforcement on third-party transcription services to catch resource exhaustion attacks early (mitigates billing surprise but does not prevent the attack). Verify remediation using the GitHub security advisory at https://github.com/openclaw/openclaw/security/advisories/GHSA-m6fx-m8hc-572m.

More in Openclaw

View all
CVE-2026-28446 CRITICAL POC
9.4 Mar 05

Auth bypass in OpenClaw voice-call extension before 2026.2.1. EPSS 0.68%. PoC and patch available.
CVE-2026-33579 CRITICAL POC
9.4 Mar 31

Privilege escalation in OpenClaw (pre-2026.3.28) allows unauthenticated remote attackers to gain administrative access b
CVE-2026-32042 HIGH POC
8.8 Mar 21

OpenClaw versions 2026.2.22 through 2026.2.24 contain a privilege escalation vulnerability that allows authenticated att
CVE-2026-32051 HIGH POC
8.8 Mar 21

An authorization mismatch vulnerability in OpenClaw versions prior to 2026.3.1 allows authenticated users with operator.
CVE-2026-25253 HIGH POC
8.8 Feb 01

OpenClaw versions prior to 2026.1.29 automatically establish WebSocket connections to attacker-controlled gateway URLs e
CVE-2026-32846 HIGH POC
8.7 Mar 26

Path traversal in OpenClaw through version 2026.3.23 enables unauthenticated remote attackers to read arbitrary files in
CVE-2026-32064 HIGH POC
7.7 Mar 21

OpenClaw sandbox browser functionality launches x11vnc for noVNC observer sessions without requiring authentication, all
CVE-2026-32055 HIGH POC
7.6 Mar 21

OpenClaw versions before 2026.2.26 allow authenticated attackers to write arbitrary files outside the workspace director
CVE-2026-32056 HIGH POC
7.5 Mar 21

OpenClaw versions prior to 2026.2.22 contain a shell environment variable injection vulnerability in the system.run func
CVE-2026-32049 HIGH POC
7.5 Mar 21

OpenClaw versions prior to 2026.2.22 contain a resource exhaustion vulnerability where the application fails to consiste
CVE-2026-32048 HIGH POC
7.5 Mar 21

OpenClaw versions prior to 2026.3.1 contain a sandbox escape vulnerability that allows authenticated attackers with low

CVE-2026-25474 HIGH POC
7.5 Feb 19

OpenClaw versions 2026.1.30 and below fail to validate Telegram webhook secret tokens when `channels.telegram.webhookSec

Same weakness CWE-408 – Incorrect Behavior Order: Early Amplification

View all
CVE-2022-2576 HIGH POC
7.5
CVE-2026-41405 HIGH
8.7
CVE-2020-1657 HIGH
7.5
CVE-2026-41374 MEDIUM
6.9
CVE-2026-3592 MEDIUM
5.3

Same technique Authentication Bypass

View all
CVE-2023-22515 CRITICAL POC
9.8
CVE-2012-4681 CRITICAL POC
9.8
CVE-2013-2465 CRITICAL POC
9.8
CVE-2011-3544 CRITICAL POC
9.8
CVE-2012-1723 CRITICAL POC
9.8
CVE-2017-10271 HIGH POC
7.5
CVE-2015-1427 CRITICAL POC
9.8
CVE-2025-3248 CRITICAL POC
9.8

Share

CVE-2026-41331 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy