Skip to main content

OpenClaw CVE-2026-43528

| EUVD-2026-27267 HIGH
Improper Removal of Sensitive Information Before Storage or Transfer (CWE-212)
2026-05-05 VulnCheck GHSA-8372-7vhw-cm6q
Authentication Bypass
7.1
CVSS 4.0
Share

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
X

Lifecycle Timeline

6
Analysis Updated
May 05, 2026 - 12:51 vuln.today
v2 (cvss_changed)
Re-analysis Queued
May 05, 2026 - 12:37 vuln.today
cvss_changed
Severity Changed
May 05, 2026 - 12:37 NVD
MEDIUM HIGH
CVSS changed
May 05, 2026 - 12:37 NVD
6.5 (MEDIUM) 7.1 (HIGH)
Source Code Evidence Fetched
May 05, 2026 - 12:21 vuln.today
Analysis Generated
May 05, 2026 - 12:21 vuln.today

DescriptionNVD

OpenClaw before 2026.4.14 contains a redaction bypass vulnerability that allows authenticated gateway clients to receive unredacted secrets through sourceConfig and runtimeConfig alias fields. Attackers with config read access can exploit this to obtain provider API keys, gateway authentication material, and channel credentials that should have been redacted.

AnalysisAI

Authenticated configuration readers in OpenClaw gateway deployments can extract unredacted sensitive credentials through alias field bypass in versions prior to 2026.4.14. Attackers with legitimate config read permissions exploit sourceConfig and runtimeConfig alias fields to obtain provider API keys, gateway authentication tokens, and channel credentials that the redaction mechanism fails to sanitize. …

Sign in for full analysis, threat intelligence, and remediation guidance.

RemediationAI

Within 24 hours: Identify all OpenClaw deployments and document current version numbers and which internal users/service accounts possess config read permissions. Within 7 days: Upgrade all OpenClaw instances to version 2026.4.14 or later; apply principle of least privilege to restrict config read access to only essential roles. …

Sign in for detailed remediation steps.

Full analysis requires sign-in

Get intelligence summaries, risk assessment, exploit details, threat intel, and remediation guidance.

Sign in - Free

Share

CVE-2026-43528 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy