Is there a patch available for CVE-2026-41345?

Yes, a patch is available for CVE-2026-41345. Update the affected software to the latest version immediately.

OpenClaw CVE-2026-41345

Q: What is the CVSS score of CVE-2026-41345?

CVE-2026-41345 has a CVSS 4.0 base score of 6.0 (Medium). CVSS vector: CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-25329 MEDIUM

Insufficiently Protected Credentials (CWE-522)

2026-04-23 VulnCheck

GHSA-49m4-chpx-gw3r

Information Disclosure Openclaw

6.0

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

6.0 MEDIUM

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

5.3 MEDIUM

Network vector; high complexity as attacker must control redirect destination; PR:N since attacker holds no account on victim system; UI:R for victim-initiated download; confidentiality-only impact from credential exposure.

3.1 AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

4.0 AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from NVD.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

Scope

Lifecycle Timeline

Source Code Evidence Fetched

Jul 24, 2026 - 03:25 vuln.today

Analysis Generated

Jul 24, 2026 - 03:25 vuln.today

CVSS changed

Apr 23, 2026 - 22:28 NVD

5.3 (MEDIUM) 6.0 (MEDIUM)

EUVD ID Assigned

Apr 23, 2026 - 22:15 euvd

EUVD-2026-25329

Patch released

Apr 23, 2026 - 22:15 nvd

Patch available

CVE Published

Apr 23, 2026 - 21:58 nvd

MEDIUM 6.0

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

1 npm packages depend on openclaw (1 direct, 0 indirect)

Ecosystem-wide dependent count for version 2026.3.31.

DescriptionCVE.org

OpenClaw before 2026.3.31 contains a credential exposure vulnerability in media download functionality that forwards Authorization headers across cross-origin redirects. Attackers can exploit this by crafting malicious cross-origin redirect chains to intercept sensitive authorization credentials intended for legitimate requests.

AnalysisAI

OpenClaw npm package versions up to and including 2026.3.28 leaks Authorization headers to attacker-controlled servers by forwarding them intact across cross-origin HTTP redirects during media downloads. An attacker who can induce a victim's OpenClaw instance to fetch a media URL that redirects cross-origin - to an attacker-controlled host - receives the victim's full Authorization bearer token. No public exploit or CISA KEV listing exists; EPSS of 0.03% (9th percentile) and SSVC exploitation status of 'none' indicate low current exploitation activity, though the credential-theft impact class is high for any user whose authorization tokens are intercepted.

Technical ContextAI

OpenClaw (CPE: cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:*:*:*) is an AI assistant distributed as an npm package. Its media download subsystem issues HTTP fetch requests that may include an Authorization header for authenticated content sources. The root cause maps to CWE-522 (Insufficiently Protected Credentials): the fetch guard in src/infra/net/fetch-guard.ts maintained a CROSS_ORIGIN_REDIRECT_SAFE_HEADERS allowlist but either misapplied it or failed to strip Authorization and Cookie headers on cross-origin redirect hops, allowing undici-based HTTP redirects to carry sensitive credentials to a different origin. The fix (commit e704323ff388ed21f6963f9b8e0b1b8dfaaabc5f) extracts the stripping logic into a dedicated src/infra/net/redirect-headers.ts module with a tested retainSafeHeadersForCrossOriginRedirect function that explicitly excludes Authorization and Cookie while preserving safe headers such as Accept, User-Agent, and Cache-Control.

RemediationAI

Upgrade the openclaw npm package to version 2026.3.31 or later, which is the first stable tag containing the fix per GHSA-68v4-hmwv-f43h. The patch commit e704323ff388ed21f6963f9b8e0b1b8dfaaabc5f (2026-03-31) is available at https://github.com/openclaw/openclaw/commit/e704323ff388ed21f6963f9b8e0b1b8dfaaabc5f. If an immediate upgrade is not feasible, a compensating control is to prevent OpenClaw from fetching media from user-supplied or third-party URLs by restricting the media download feature to same-origin or pre-approved origin allowlists; disabling this feature entirely eliminates the attack surface but may impair legitimate media-saving functionality. There are no additional workarounds documented in the advisory.