EUVD-2026-26114Severity by source
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Lifecycle Timeline
7Blast Radius
ecosystem impact- 5 npm packages depend on openclaw (5 direct, 0 indirect)
Ecosystem-wide dependent count for version 2026.4.2.
DescriptionCVE.org
OpenClaw before 2026.4.2 contains a timing side channel vulnerability in shared-secret comparison call sites that use early length-mismatch checks instead of fixed-length comparison helpers. Attackers can measure timing differences to leak secret-length information, weakening constant-time handling for shared secrets.
AnalysisAI
OpenClaw before version 2026.4.2 leaks shared-secret length information through timing side-channel attacks in cryptographic comparison operations. The vulnerability stems from early length-mismatch checks in shared-secret comparison routines that violate constant-time security requirements, allowing remote attackers to measure timing differences and infer secret lengths without authentication. This weakens the cryptographic guarantees of the library's shared-secret handling.
Technical ContextAI
The vulnerability involves CWE-208 (Observable Timing Discrepancy), a side-channel weakness in cryptographic implementations. OpenClaw's shared-secret comparison call sites perform early length-mismatch checks before conducting fixed-length comparison operations. When comparing secrets of different lengths, the comparison function returns quickly (short timing), revealing to an attacker that the length of their supplied secret differs from the target secret. Proper constant-time comparison requires comparing all bytes regardless of length first, then returning a single result. This is a classic side-channel flaw in cryptographic libraries affecting data types like API keys, authentication tokens, or other shared secrets managed by OpenClaw.
RemediationAI
Upgrade OpenClaw to version 2026.4.2 or later, which includes the fix commit be10ecef770a4654519869c3641bbb91087c8c7b that implements fixed-length constant-time comparison helpers for all shared-secret comparison call sites. The patch is available from the official GitHub repository at https://github.com/openclaw/openclaw/security/advisories/GHSA-jj6q-rrrf-h66h. For organizations unable to immediately upgrade, implement compensating controls by deploying OpenClaw behind a rate-limiting proxy that blocks rapid-fire comparison attempts from single source IPs, which increases timing measurement noise and raises the attacker's difficulty without disabling functionality. However, rate-limiting introduces latency variance that may impact legitimate users; a secondary control is to monitor for statistical patterns in failed authentication attempts that correlate with timing side-channel attack signatures (e.g., repeated requests with systematically varying secret lengths). Complete mitigation requires applying the vendor patch.
Auth bypass in OpenClaw voice-call extension before 2026.2.1. EPSS 0.68%. PoC and patch available.
Privilege escalation in OpenClaw (pre-2026.3.28) allows unauthenticated remote attackers to gain administrative access b
OpenClaw versions 2026.2.22 through 2026.2.24 contain a privilege escalation vulnerability that allows authenticated att
An authorization mismatch vulnerability in OpenClaw versions prior to 2026.3.1 allows authenticated users with operator.
OpenClaw versions prior to 2026.1.29 automatically establish WebSocket connections to attacker-controlled gateway URLs e
Path traversal in OpenClaw through version 2026.3.23 enables unauthenticated remote attackers to read arbitrary files in
OpenClaw sandbox browser functionality launches x11vnc for noVNC observer sessions without requiring authentication, all
OpenClaw versions before 2026.2.26 allow authenticated attackers to write arbitrary files outside the workspace director
OpenClaw versions prior to 2026.2.22 contain a shell environment variable injection vulnerability in the system.run func
OpenClaw versions prior to 2026.2.22 contain a resource exhaustion vulnerability where the application fails to consiste
OpenClaw versions prior to 2026.3.1 contain a sandbox escape vulnerability that allows authenticated attackers with low
OpenClaw versions 2026.1.30 and below fail to validate Telegram webhook secret tokens when `channels.telegram.webhookSec
Same weakness CWE-208 – Observable Timing Discrepancy
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today