EUVD-2026-26110Severity by source
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Lifecycle Timeline
7Blast Radius
ecosystem impact- 1 npm packages depend on openclaw (1 direct, 0 indirect)
Ecosystem-wide dependent count for version 2026.3.31.
DescriptionCVE.org
OpenClaw before 2026.3.31 misclassifies proxied remote requests as loopback connections in the diffs viewer when allowRemoteViewer is disabled, allowing unauthorized access. Attackers can bypass access controls by sending proxied requests that are incorrectly identified as local loopback traffic, circumventing intended remote viewer restrictions.
AnalysisAI
OpenClaw before version 2026.3.31 misclassifies proxied remote requests as loopback connections in the diffs viewer, allowing attackers to bypass the allowRemoteViewer access control restriction. Unauthenticated remote attackers can exploit this authentication bypass by sending specially crafted proxied requests that are incorrectly identified as local traffic, gaining unauthorized access to the diffs viewer functionality. The vulnerability requires network access and specific timing/proximity conditions (per CVSS AT:P vector), but once exploited results in confidentiality impact through unauthorized information disclosure.
Technical ContextAI
OpenClaw's diffs viewer implements access controls via the allowRemoteViewer configuration flag to restrict remote access to diff viewing capabilities. The vulnerability stems from a request classification logic flaw (CWE-807: Reliance on Untrusted Inputs in a Security Decision) where the application fails to properly distinguish between authentic loopback/local requests and proxied requests that are relayed through intermediate systems. When a request is proxied, headers or connection metadata that should indicate remote origin are not correctly validated, causing the application to classify the proxied request as a legitimate loopback connection. The CPE cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:*:*:* indicates all versions prior to 2026.3.31 are affected regardless of platform. The root cause is a trust boundary violation where the application relies on network-layer connection information that can be spoofed or misrepresented in proxied scenarios.
RemediationAI
Upgrade OpenClaw to version 2026.3.31 or later. The vendor-released patch is confirmed by GitHub commit 30a1690323088fd291abd11643a264a6828a002c at https://github.com/openclaw/openclaw/commit/30a1690323088fd291abd11643a264a6828a002c. If immediate upgrade is not possible, disable the diffs viewer functionality entirely or set allowRemoteViewer=true if remote access is acceptable for your use case (this eliminates the bypass scenario but enables remote access that the control intended to restrict). Alternatively, implement network-level access controls via firewall or reverse proxy to restrict requests to the diffs viewer endpoint to trusted IP ranges, ensuring that legitimate local requests cannot be spoofed via external proxies. Monitor logs for proxied requests (inspect X-Forwarded-For headers or proxy-related metadata) targeting the diffs viewer endpoint when allowRemoteViewer is disabled, as these indicate exploitation attempts.
Auth bypass in OpenClaw voice-call extension before 2026.2.1. EPSS 0.68%. PoC and patch available.
Privilege escalation in OpenClaw (pre-2026.3.28) allows unauthenticated remote attackers to gain administrative access b
OpenClaw versions 2026.2.22 through 2026.2.24 contain a privilege escalation vulnerability that allows authenticated att
An authorization mismatch vulnerability in OpenClaw versions prior to 2026.3.1 allows authenticated users with operator.
OpenClaw versions prior to 2026.1.29 automatically establish WebSocket connections to attacker-controlled gateway URLs e
Path traversal in OpenClaw through version 2026.3.23 enables unauthenticated remote attackers to read arbitrary files in
OpenClaw sandbox browser functionality launches x11vnc for noVNC observer sessions without requiring authentication, all
OpenClaw versions before 2026.2.26 allow authenticated attackers to write arbitrary files outside the workspace director
OpenClaw versions prior to 2026.2.22 contain a shell environment variable injection vulnerability in the system.run func
OpenClaw versions prior to 2026.2.22 contain a resource exhaustion vulnerability where the application fails to consiste
OpenClaw versions prior to 2026.3.1 contain a sandbox escape vulnerability that allows authenticated attackers with low
OpenClaw versions 2026.1.30 and below fail to validate Telegram webhook secret tokens when `channels.telegram.webhookSec
Same technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today