Which versions of OpenClaw are affected by CVE-2026-41375?

OpenClaw versions prior to 2026.3.28 contain an authorization bypass in phone channel alarm endpoints that allows low-privilege authenticated users to arm or disarm alarms without administrative…. A patch is available.

How to fix or mitigate CVE-2026-41375?

Within 24 hours: Identify all OpenClaw deployments and document current version numbers across production and non-production environments. Within 7 days: Apply vendor patch to OpenClaw version 2026.3.28 or later (GitHub commit aa66ae1fc); prioritize systems with phone channel endpoints exposed to network access. Within 30 days: Complete patching of all remaining instances and validate through security testing that low-privilege users can no longer access /phone arm and /phone disarm API endpoints.

OpenClaw CVE-2026-41375

Q: What is the CVSS score of CVE-2026-41375?

CVE-2026-41375 has a CVSS 4.0 base score of 7.1 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.1%.

EUVD-2026-26084 HIGH

Incorrect Authorization (CWE-863)

2026-04-28 VulnCheck

Authentication Bypass Openclaw

7.1

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

7.1 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Re-analysis Queued

Apr 28, 2026 - 20:23 vuln.today

cvss_changed

Analysis Generated

Apr 28, 2026 - 20:02 vuln.today

Severity Changed

Apr 28, 2026 - 19:52 NVD

MEDIUM HIGH

CVSS changed

Apr 28, 2026 - 19:52 NVD

6.5 (MEDIUM) 7.1 (HIGH)

EUVD ID Assigned

Apr 28, 2026 - 19:30 euvd

EUVD-2026-26084

Analysis Generated

Apr 28, 2026 - 19:30 vuln.today

Patch released

Apr 28, 2026 - 19:30 nvd

Patch available

CVE Published

Apr 28, 2026 - 18:09 nvd

HIGH 7.1

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

3 npm packages depend on openclaw (3 direct, 0 indirect)

Ecosystem-wide dependent count for version 2026.3.28.

DescriptionCVE.org

OpenClaw before 2026.3.28 contains an authorization bypass vulnerability in the /phone arm and /phone disarm endpoints that fails to properly enforce operator.admin scope checks for external channels. Attackers can bypass authentication restrictions to arm or disarm phone channels without proper administrative privileges.

AnalysisAI

Authorization bypass in OpenClaw phone channel endpoints allows authenticated low-privilege users to arm or disarm phone-based alarm channels without required administrative rights. Versions prior to 2026.3.28 fail to validate operator.admin scope for /phone arm and /phone disarm API endpoints when accessed through external channels (CWE-863). Patch released via GitHub commit aa66ae1fc, with CVSS 7.1 reflecting network-accessible integrity impact requiring only low-privilege authentication. No active exploitation confirmed (not in CISA KEV); exploit development straightforward given simple API authorization flaw.

Technical ContextAI

This vulnerability affects OpenClaw, a security/access control system with phone-based arming/disarming capabilities. The flaw is a classic broken access control issue (CWE-863: Incorrect Authorization) in the REST API layer. The /phone arm and /phone disarm endpoints process state-change requests for phone channels but fail to enforce role-based access control (RBAC) checks for the operator.admin scope when requests originate from external channels. This allows any authenticated user with valid credentials (PR:L in CVSS 4.0) to invoke administrative functions they should not have access to. The CPE identifier cpe:2.3:a:openclaw:openclaw indicates this is a first-party vulnerability in the OpenClaw application itself, not a dependency. The CVSS 4.0 vector shows VI:H (high integrity impact to vulnerable system) with no confidentiality or availability impact, consistent with unauthorized state modifications.

RemediationAI

Upgrade to OpenClaw version 2026.3.28 or later, which contains the authorization fix committed in aa66ae1fc797d3298cc409ed2c5da69a89950a45 (https://github.com/openclaw/openclaw/commit/aa66ae1fc797d3298cc409ed2c5da69a89950a45). For environments unable to immediately patch, implement compensating controls: (1) Restrict network access to /phone arm and /phone disarm endpoints to trusted admin networks only via firewall rules or API gateway policies, reducing attack surface but limiting legitimate external access functionality; (2) Enable enhanced audit logging for all phone channel state changes and establish alerting for unauthorized arm/disarm attempts by non-admin accounts; (3) Review and revoke unnecessary user accounts with access to OpenClaw APIs, enforcing strict least-privilege credential policies. Note these workarounds do not fix the underlying authorization flaw and may impact operational workflows requiring external channel access. Full remediation requires applying the vendor patch.