Which versions of OpenClaw are affected by CVE-2026-42428?

A vulnerability in OpenClaw (versions before 2026.4.8) allows attackers to inject malicious or tampered plugins that execute without verification, putting local environments and accessible data at…. A patch is available.

How to fix or mitigate CVE-2026-42428?

Within 24 hours, notify OpenClaw users to avoid installing plugins from untrusted sources and inventory all OpenClaw deployments in your environment. Within 7 days, upgrade all instances to OpenClaw version 2026.4.8, which includes the integrity verification fix. Within 30 days, audit plugin installation logs to identify any suspicious activity and remove or review any plugins installed prior to the upgrade.

OpenClaw CVE-2026-42428

Q: What is the CVSS score of CVE-2026-42428?

CVE-2026-42428 has a CVSS 4.0 base score of 7.5 (High). CVSS vector: CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-26130 HIGH

Missing Support for Integrity Check (CWE-353)

2026-04-28 VulnCheck

Information Disclosure Openclaw

7.5

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

7.5 HIGH

CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

7.1 HIGH

Network-delivered tampering with high complexity (AC:H) and user-initiated plugin install (UI:R); the missing integrity check lets malicious code run locally, giving full C/I/A impact, with PR:L per the operator context.

3.1 AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

4.0 AV:N/AC:H/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from NVD.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

High

Privileges Required

Low

User Interaction

Scope

Lifecycle Timeline

Source Code Evidence Fetched

Jul 24, 2026 - 04:14 vuln.today

Analysis Generated

Jul 24, 2026 - 04:14 vuln.today

CVSS changed

Apr 28, 2026 - 19:52 NVD

7.1 (HIGH) 7.5 (HIGH)

EUVD ID Assigned

Apr 28, 2026 - 19:30 euvd

EUVD-2026-26130

Patch released

Apr 28, 2026 - 19:30 nvd

Patch available

CVE Published

Apr 28, 2026 - 18:10 nvd

HIGH 7.5

DescriptionCVE.org

OpenClaw versions before 2026.4.8 fail to enforce integrity verification on downloaded plugin archives. Attackers can install malicious or tampered plugin packages without detection, compromising the local assistant environment.

AnalysisAI

Missing integrity verification in OpenClaw before 2026.4.8 (npm package 'openclaw', tracked by the vendor as B-M3) lets attackers deliver tampered or malicious ClawHub plugin archives that install without any archive- or per-file integrity check, compromising the local assistant environment. The flaw was reported by VulnCheck and Tencent Zhuque Lab and is fixed in 2026.4.8; there is no public exploit identified at time of analysis, and EPSS is very low (0.02%, 4th percentile). Because OpenClaw is a user-controlled local assistant, exploitation requires the victim to install a plugin whose download an attacker can substitute or tamper with.

Technical ContextAI

OpenClaw is a local, user-controlled AI assistant distributed as the npm package 'openclaw', with a plugin ecosystem delivered through 'ClawHub'. The root cause is CWE-353 (Missing Support for Integrity Check): ClawHub plugin downloads were installed without enforcing archive-level or per-file integrity metadata such as cryptographic hashes or signatures. Without that verification step the client cannot distinguish a genuine plugin archive from one altered in transit or served from a substituted source, so tampering goes undetected before the plugin is unpacked and trusted by the local environment. The single affected CPE is cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:*:*:*.

RemediationAI

Vendor-released patch: 2026.4.8 - upgrade the 'openclaw' npm package to 2026.4.8 or later, which enforces integrity verification on ClawHub plugin downloads (verified fixed tree at commit d7c3210cd6f5fdfdc1beff4c9541673e814354d5). Until upgraded, avoid installing or updating plugins from ClawHub, and only install plugin archives obtained over a trusted channel whose integrity you can independently verify, for example by manually checking a published hash before installation; this trades convenience and access to the plugin ecosystem for safety. Run the assistant under a least-privilege local user account so a malicious plugin has limited reach, and monitor the plugin install directory for unexpected changes. Full details and fix confirmation are in the vendor advisory at https://github.com/openclaw/openclaw/security/advisories/GHSA-3vvq-q2qc-7rmp and https://www.vulncheck.com/advisories/openclaw-missing-integrity-verification-in-package-downloads.