Is there a patch available for CVE-2026-41406?

Yes, a patch is available for CVE-2026-41406. Update the affected software to the latest version immediately.

OpenClaw CVE-2026-41406

Q: What is the CVSS score of CVE-2026-41406?

CVE-2026-41406 has a CVSS 4.0 base score of 2.3 (Low). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-26113 LOW

Authorization Bypass Through User-Controlled Key (CWE-639)

2026-04-28 VulnCheck

Authentication Bypass Openclaw

2.3

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

2.3 LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Scope

Lifecycle Timeline

Analysis Generated

Apr 28, 2026 - 20:08 vuln.today

Severity Changed

Apr 28, 2026 - 19:52 NVD

MEDIUM LOW

CVSS changed

Apr 28, 2026 - 19:52 NVD

5.4 (MEDIUM) 2.3 (LOW)

EUVD ID Assigned

Apr 28, 2026 - 19:30 euvd

EUVD-2026-26113

Analysis Generated

Apr 28, 2026 - 19:30 vuln.today

Patch released

Apr 28, 2026 - 19:30 nvd

Patch available

CVE Published

Apr 28, 2026 - 18:10 nvd

LOW 2.3

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

1 npm packages depend on openclaw (1 direct, 0 indirect)

Ecosystem-wide dependent count for version 2026.3.31.

DescriptionCVE.org

OpenClaw before 2026.3.31 contains a sender allowlist bypass vulnerability that allows remote attackers to access restricted messages. Attackers can exploit fetched quoted, root, and thread context messages to bypass sender allowlist restrictions and retrieve unauthorized content.

AnalysisAI

OpenClaw before version 2026.3.31 contains a sender allowlist bypass vulnerability allowing remote attackers to access restricted messages by exploiting quoted, root, and thread context message retrieval mechanisms. The vulnerability affects default configurations and requires user interaction (CVSS UI:P), making it a moderate-risk authentication bypass that undermines message access controls.

Technical ContextAI

OpenClaw implements a sender allowlist mechanism to restrict message access based on sender identity. The vulnerability exploits the application's message retrieval logic for quoted messages, thread roots, and thread context-features that fetch related messages without properly re-validating against the sender allowlist. This is classified as CWE-639 (Authorization Bypass Through User-Controlled Key), where the application fails to properly enforce access control restrictions when retrieving contextual message data. The attack vector is network-based (AV:N), indicating the vulnerability can be triggered remotely, but requires user interaction (UI:P) and has partial attack time requirements (AT:P), limiting the attack surface to scenarios where a user actively performs message retrieval actions.

RemediationAI

Upgrade OpenClaw to version 2026.3.31 or later, which includes the vendor patch (commit f45e5a6569aab1d58cc6de25b19f1dc4c8779b85 on GitHub). Apply the patch immediately via the official vendor repository at https://github.com/openclaw/openclaw/security/advisories/GHSA-877v-w3f5-3pcq. If immediate upgrade is not possible, implement compensating controls by restricting user access to message thread retrieval and quoted message features until patching is complete; note that this may degrade user experience and should be treated as a temporary mitigation only. Review access logs for any exploitation attempts involving unusual quoted message or thread context retrieval patterns, particularly from users accessing messages outside normal workflow.