EUVD-2026-45099
GHSA-xmvq-76g8-6jhm
Severity by source
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Local vector with low-privilege caller and required user interaction aligns to AV:L/PR:L/UI:R; no integrity or availability impact applies.
Primary rating from Vendor (VulnCheck).
CVSS VectorVendor: VulnCheck
Lifecycle Timeline
2DescriptionCVE.org
OpenClaw versions before 2026.6.1 contain a credential redaction bypass vulnerability in the trajectory export feature that allows lower-trust callers to access data that should remain within trusted boundaries. Attackers can exploit misconfigured input paths or feature accessibility to expose sensitive credentials and data through the export mechanism.
AnalysisAI
Credential redaction bypass in OpenClaw before version 2026.6.1 allows lower-privileged local users to extract sensitive credentials through the trajectory export feature by exploiting misconfigured input paths or improperly accessible export functionality. The product's redaction controls fail to enforce trust boundaries, causing credentials that should remain opaque to lower-trust callers to surface in export output. No public exploit has been identified at time of analysis; exploitation requires local access, low privileges, and user interaction, which constrains realistic risk despite the high confidentiality impact when conditions are met.
Technical ContextAI
The vulnerability is classified as CWE-532 (Insertion of Sensitive Information into Log File / Output), which here manifests as a redaction bypass in an export pathway rather than a traditional log file. The trajectory export feature processes or serializes internal state - likely including credentials or secrets used in trajectory configuration - and fails to enforce a trust-level boundary between callers with different privilege levels. Lower-trust callers can trigger or manipulate this export pathway (via misconfigured input paths or feature accessibility gaps) to receive output that bypasses the intended credential-scrubbing layer. The affected product is identified by CPE cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:*:*:* covering all OpenClaw releases before 2026.6.1. The CVSS 4.0 vector (AT:P) confirms that a specific pre-existing condition - misconfigured input paths or accessible export feature - must be present, making this configuration-dependent rather than a default-state flaw.
RemediationAI
Upgrade to OpenClaw 2026.6.1 or later, which introduces the fix for the credential redaction bypass per the vendor GitHub security advisory at https://github.com/openclaw/openclaw/security/advisories/GHSA-j4cx-jvq7-79vm. The exact nature of the fix (code change, configuration enforcement) is not detailed in the available advisory text but the 2026.6.1 release is the confirmed remediation target. As a compensating control where immediate upgrade is not feasible, restrict access to the trajectory export feature to high-trust accounts only and audit input path configurations to eliminate misconfigured paths that enable lower-trust callers to trigger the export mechanism - note that this reduces exposure but does not eliminate the underlying redaction bypass. Additionally, rotate any credentials that may have been accessible to the export pathway in case prior exfiltration occurred in environments where lower-trust users had local access.
Auth bypass in OpenClaw voice-call extension before 2026.2.1. EPSS 0.68%. PoC and patch available.
Privilege escalation in OpenClaw (pre-2026.3.28) allows unauthenticated remote attackers to gain administrative access b
OpenClaw versions 2026.2.22 through 2026.2.24 contain a privilege escalation vulnerability that allows authenticated att
An authorization mismatch vulnerability in OpenClaw versions prior to 2026.3.1 allows authenticated users with operator.
OpenClaw versions prior to 2026.1.29 automatically establish WebSocket connections to attacker-controlled gateway URLs e
Path traversal in OpenClaw through version 2026.3.23 enables unauthenticated remote attackers to read arbitrary files in
OpenClaw sandbox browser functionality launches x11vnc for noVNC observer sessions without requiring authentication, all
OpenClaw versions before 2026.2.26 allow authenticated attackers to write arbitrary files outside the workspace director
OpenClaw versions prior to 2026.2.22 contain a shell environment variable injection vulnerability in the system.run func
OpenClaw versions prior to 2026.2.22 contain a resource exhaustion vulnerability where the application fails to consiste
OpenClaw versions prior to 2026.3.1 contain a sandbox escape vulnerability that allows authenticated attackers with low
OpenClaw versions 2026.1.30 and below fail to validate Telegram webhook secret tokens when `channels.telegram.webhookSec
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today