Is there a patch available for CVE-2026-41365?

Yes, a patch is available for CVE-2026-41365. Update the affected software to the latest version immediately.

OpenClaw CVE-2026-41365

Q: What is the CVSS score of CVE-2026-41365?

CVE-2026-41365 has a CVSS 4.0 base score of 5.3 (Medium). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

MEDIUM

Unintended Proxy or Intermediary ('Confused Deputy') (CWE-441)

2026-04-28 disclosure@vulncheck.com

Authentication Bypass Openclaw

5.3

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

5.3 MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Apr 28, 2026 - 00:32 vuln.today

Analysis Generated

Apr 28, 2026 - 00:22 vuln.today

CVE Published

Apr 28, 2026 - 00:16 nvd

MEDIUM 5.3

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

1 npm packages depend on openclaw (1 direct, 0 indirect)

Ecosystem-wide dependent count for version 2026.3.31.

DescriptionCVE.org

OpenClaw before 2026.3.31 contains a sender allowlist bypass vulnerability in MS Teams thread history fetched via Graph API. Attackers can retrieve thread messages that should be filtered by sender allowlists, bypassing message filtering restrictions.

AnalysisAI

OpenClaw before version 2026.3.31 allows authenticated remote attackers to bypass sender allowlist filters when retrieving MS Teams thread history via Microsoft Graph API, enabling access to messages that should be restricted by security policies. The vulnerability affects organizations using OpenClaw's Teams integration and has been patched as of the specified version.

Technical ContextAI

OpenClaw integrates with Microsoft Teams through the Microsoft Graph API to fetch thread history. The vulnerability exists in the message filtering logic that applies sender allowlists - security policies designed to restrict which message senders' content users can access. CWE-441 (Unintended Proxy or Intermediary) indicates the core issue: OpenClaw acts as an intermediary between Teams and end users but fails to properly enforce access control policies when proxying data from the Graph API, allowing it to return messages from restricted senders that should have been filtered out before presentation to the user.

RemediationAI

Upgrade OpenClaw to version 2026.3.31 or later immediately. The vendor has released a patched version confirmed by the GitHub commit (5cca38084074fb5095aa11b6a59820d63e4937c9) which implements proper filtering of Graph API thread responses. Organizations unable to upgrade immediately should review sender allowlist policies in OpenClaw and consider implementing additional access controls at the Teams level (e.g., restricting Graph API scopes via Azure AD conditional access policies or disabling Teams thread history features in OpenClaw until patched). Note that this workaround may impact OpenClaw functionality and should be validated in testing before production deployment. For detailed patch information and configuration guidance, consult the GitHub security advisory at https://github.com/openclaw/openclaw/security/advisories/GHSA-chfm-xgc4-47rj.