Which versions of OpenClaw are affected by CVE-2026-41342?

The OpenClaw CLI (npm package, versions ≤2026.3.24) allows adjacent network attackers to redirect onboarding traffic toward attacker-controlled gateways to intercept cloud credentials and monitor…. A patch is available.

How to fix or mitigate CVE-2026-41342?

Within 24 hours: inventory all instances of the 'openclaw' npm package across development machines, CI/CD pipelines, and container images using 'npm ls openclaw' and image scanning tools; flag any system running versions ≤2026.3.24. Within 7 days: pull the patched version from the npm registry, test for compatibility in a non-production environment, and push updates to developer workstations and internal CI/CD. Within 30 days: complete rollout to all production systems, Kubernetes clusters, and build containers; remove all legacy versions from artifact repositories and verify no pinned build references remain.

OpenClaw CVE-2026-41342

Q: What is the CVSS score of CVE-2026-41342?

CVE-2026-41342 has a CVSS 4.0 base score of 7.4 (High). CVSS vector: CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-25326 HIGH

Origin Validation Error (CWE-346)

2026-04-23 VulnCheck

GHSA-gv2f-q4wp-fvh5

GHSA-3cw3-5vxw-g2h3

Authentication Bypass Openclaw

7.4

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

7.4 HIGH

CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

6.4 MEDIUM

Adjacent spoofing (AV:A) needing attacker positioning and victim onboarding raises complexity and user interaction (AC:H/UI:R); credential capture yields C:H/I:H, no availability impact.

3.1 AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

4.0 AV:A/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

Primary rating from NVD.

CVSS VectorNVD

Attack Vector

Adjacent

Attack Complexity

Low

Privileges Required

None

User Interaction

Scope

Lifecycle Timeline

Source Code Evidence Fetched

Jul 24, 2026 - 03:26 vuln.today

Analysis Generated

Jul 24, 2026 - 03:26 vuln.today

Patch released

Apr 29, 2026 - 15:55 nvd

Patch available

Apr 24, 2026 - 02:01 EUVD

CVSS changed

Apr 23, 2026 - 22:28 NVD

7.3 (HIGH) 7.4 (HIGH)

EUVD ID Assigned

Apr 23, 2026 - 22:15 euvd

EUVD-2026-25326

CVE Published

Apr 23, 2026 - 21:58 nvd

HIGH 7.4

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

3 npm packages depend on openclaw (3 direct, 0 indirect)

Ecosystem-wide dependent count for version 2026.3.28.

DescriptionCVE.org

OpenClaw before 2026.3.28 contains an authentication bypass vulnerability in the remote onboarding component that persists unauthenticated discovery endpoints without explicit trust confirmation. Attackers can spoof discovery endpoints to redirect onboarding toward malicious gateways and capture gateway credentials or traffic.

AnalysisAI

Credential and traffic interception in the OpenClaw CLI (npm package 'openclaw', versions <= 2026.3.24) stems from its remote onboarding component persisting attacker-supplied discovery endpoints without an explicit trust confirmation. An adjacent attacker who can spoof a discovery endpoint can steer onboarding toward an attacker-controlled gateway and capture future gateway credentials or connection traffic. There is no public exploit identified at time of analysis, EPSS risk is negligible (0.01%), and CISA SSVC records no observed exploitation, though the technical impact is rated total.

Technical ContextAI

OpenClaw is a command-line tool (distributed via npm) whose remote onboarding workflow discovers a gateway endpoint over the network and then persists the remote URL and connection details to local configuration. The flaw lives in src/commands/onboard-remote.ts, which accepted a discovered gateway endpoint and saved it without prompting the operator to confirm trust in that endpoint. This maps to CWE-346 (Origin Validation Error): the client fails to validate the authenticity/origin of the discovery response, so a spoofed or malicious discovery service is treated as legitimate. Because subsequent gateway authentication is directed at whatever URL was persisted, a mis-trusted origin becomes a credential-harvesting channel. CPE cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:*:*:* confirms the single affected product line.

RemediationAI

Vendor-released patch: upgrade to OpenClaw 2026.3.28 or later (fixed by commit d6affb17d85f5f5ab08ef9f2b994b257af12e75a, 'CLI: confirm discovered remote gateways before saving config'); for npm deployments run an update to openclaw@2026.3.28. Until you can upgrade, avoid running the remote onboarding flow on untrusted or shared/adjacent networks, and only perform onboarding where the discovery path cannot be spoofed (e.g., a trusted wired segment or VPN) - the trade-off is operational inconvenience during provisioning. Operators should also manually verify and pin the gateway URL/connection details written to config after onboarding and rotate any gateway credentials that may have been submitted to an unverified endpoint. Advisory: https://github.com/openclaw/openclaw/security/advisories/GHSA-3cw3-5vxw-g2h3.