Is there a patch available for EUVD-2026-25334?

Yes, a patch is available for EUVD-2026-25334. Update the affected software to the latest version immediately.

OpenClaw EUVD-2026-25334

Q: What is the CVSS score of EUVD-2026-25334?

EUVD-2026-25334 has a CVSS 4.0 base score of 5.3 (Medium). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

| CVE-2026-41350 MEDIUM

Incorrect Authorization (CWE-863)

2026-04-23 VulnCheck

GHSA-cpjq-67p9-jx5h

Authentication Bypass Openclaw

5.3

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

5.3 MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

4.3 MEDIUM

Requires authenticated agent access (PR:L); impact is limited to session metadata confidentiality (C:L); no integrity, availability, or scope-change impact applies.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from NVD.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Source Code Evidence Fetched

Jul 24, 2026 - 03:22 vuln.today

Analysis Generated

Jul 24, 2026 - 03:22 vuln.today

CVSS changed

Apr 23, 2026 - 22:28 NVD

4.3 (MEDIUM) 5.3 (MEDIUM)

EUVD ID Assigned

Apr 23, 2026 - 22:15 euvd

EUVD-2026-25334

Patch released

Apr 23, 2026 - 22:15 nvd

Patch available

CVE Published

Apr 23, 2026 - 21:58 nvd

MEDIUM 5.3

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

1 npm packages depend on openclaw (1 direct, 0 indirect)

Ecosystem-wide dependent count for version 2026.3.31.

DescriptionCVE.org

OpenClaw before 2026.3.31 contains a session visibility bypass vulnerability where the session_status function fails to enforce configured tools.sessions.visibility restrictions for unsandboxed invocations. Attackers can invoke session_status without sandbox constraints to bypass session-policy controls and access restricted session information.

AnalysisAI

Session visibility bypass in OpenClaw (npm) versions through 2026.3.28 permits authenticated agents to read session metadata beyond their authorized scope by invoking session_status outside a sandboxed context. The visibility guard in session-status-tool.ts was conditionally applied only for sandboxed invocations or session-ID-resolved lookups, leaving unsandboxed callers entirely ungated against the tools.sessions.visibility policy. The maintainer triaged this as a same-agent session-policy bypass rather than a host-boundary breach; no public exploit exists and SSVC/EPSS signals indicate no active exploitation pressure.

Technical ContextAI

OpenClaw is an npm-based multi-agent orchestration framework that exposes a session_status tool allowing agents to query session metadata. Access is governed by the tools.sessions.visibility configuration key (e.g., 'self' restricts an agent to its own session). CWE-863 (Incorrect Authorization) is the root cause: in session-status-tool.ts, the visibilityGuard.check() call was gated inside a conditional requiring either resolvedTargetViaSessionId = true or opts?.sandboxed = true. Unsandboxed invocations with explicit agent keys bypassed this branch entirely. Additionally, visibilityRequesterKey incorrectly used effectiveRequesterKey instead of opts?.agentSessionKey, meaning the caller identity fed into visibility checks was wrong for unsandboxed contexts. The fix (commit 4d369a3400dc9b737fbe8daa63f09d909ce7beb8) unconditionally applies visibilityGuard.check() and corrects the requester key derivation. Affected CPE: cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:*:*:*.

RemediationAI

Upgrade OpenClaw to version 2026.3.31 or later, the first stable tag containing the fix (commit 4d369a3400dc9b737fbe8daa63f09d909ce7beb8, merged 2026-03-30). Install via npm: npm install openclaw@>=2026.3.31. The full vendor advisory is at https://github.com/openclaw/openclaw/security/advisories/GHSA-fwjq-xwfj-gv75 and the patch commit is at https://github.com/openclaw/openclaw/commit/4d369a3400dc9b737fbe8daa63f09d909ce7beb8. If immediate upgrade is not possible, restricting all agent configurations to sandboxed invocations (opts.sandboxed = true) ensures the visibility guard is applied, though this may limit functionality for agents that rely on unsandboxed session_status calls. Alternatively, setting tools.sessions.visibility to a permissive value eliminates the bypass surface at the cost of removing session isolation policy.