Which versions of OpenClaw are affected by EUVD-2026-26088?

OpenClaw versions prior to 2026.3.28 contain a privilege escalation vulnerability that allows authenticated operators to bypass role-based access controls and modify administrator-only voice…. A patch is available.

OpenClaw EUVD-2026-26088

Q: What is the CVSS score of EUVD-2026-26088?

EUVD-2026-26088 has a CVSS 4.0 base score of 7.1 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

Q: How to fix or mitigate EUVD-2026-26088?

Within 24 hours: Identify all OpenClaw deployments and document current version numbers. Within 7 days: Upgrade all OpenClaw installations to version 2026.3.28 or later (vendor-released patch: commit e34694733fc64931ed4a543c73d84ad3435d5df1). Within 30 days: Audit voice configuration change logs for unauthorized modifications and review operator account permissions to enforce least-privilege access.

| CVE-2026-41379 HIGH

Incorrect Authorization (CWE-863)

2026-04-28 VulnCheck

Authentication Bypass Privilege Escalation Openclaw

7.1

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

7.1 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Re-analysis Queued

Apr 28, 2026 - 20:23 vuln.today

cvss_changed

Analysis Generated

Apr 28, 2026 - 20:02 vuln.today

EUVD ID Assigned

Apr 28, 2026 - 19:30 euvd

EUVD-2026-26088

Analysis Generated

Apr 28, 2026 - 19:30 vuln.today

Patch released

Apr 28, 2026 - 19:30 nvd

Patch available

CVE Published

Apr 28, 2026 - 18:09 nvd

HIGH 7.1

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

3 npm packages depend on openclaw (3 direct, 0 indirect)

Ecosystem-wide dependent count for version 2026.3.28.

DescriptionCVE.org

OpenClaw before 2026.3.28 contains a privilege escalation vulnerability allowing authenticated operators with write permissions to access admin-class Talk Voice configuration persistence. Attackers with operator.write privileges can exploit the chat.send endpoint to reach and modify sensitive voice configuration settings intended for administrators only.

AnalysisAI

Privilege escalation in OpenClaw versions prior to 2026.3.28 enables authenticated operators with write permissions to modify administrator-only voice configuration settings through the chat.send endpoint. This vulnerability allows low-privileged operator accounts to manipulate sensitive Talk Voice configuration persistence, bypassing intended role-based access controls. A vendor-released patch is available via commit e34694733fc64931ed4a543c73d84ad3435d5df1. EPSS data unavailable; no CISA KEV listing or public exploit code identified at time of analysis, though the targeted nature (authenticated internal operators) suggests lower mass-exploitation risk than the CVSS 7.1 score might imply.

Technical ContextAI

OpenClaw is a software platform containing a chat/communication subsystem with distinct operator and administrator privilege tiers. The vulnerability stems from CWE-863 (Incorrect Authorization), where the chat.send API endpoint fails to enforce proper authorization checks when accessing Talk Voice configuration settings. This is an architectural flaw in the access control logic: the endpoint permits operator.write privilege holders to traverse privilege boundaries and reach admin-class configuration persistence layers. The affected component appears to be cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:*:*:*, indicating all versions before the 2026.3.28 release lack proper privilege separation between operator and administrative functions within the voice configuration subsystem.

RemediationAI

Upgrade OpenClaw to version 2026.3.28 or apply the vendor-released patch commit e34694733fc64931ed4a543c73d84ad3435d5df1 available at https://github.com/openclaw/openclaw/commit/e34694733fc64931ed4a543c73d84ad3435d5df1. Review the GitHub security advisory at https://github.com/openclaw/openclaw/security/advisories/GHSA-3q42-xmxv-9vfr for complete remediation guidance. If immediate patching is not feasible, implement compensating controls: restrict operator.write privileges to only essential personnel (reduces attack surface but limits operational functionality), enable audit logging on the chat.send endpoint to detect unauthorized configuration access attempts (detection only, does not prevent exploitation), or disable the Talk Voice configuration feature if not operationally required (eliminates attack vector but removes voice functionality). Each workaround trades security for operational capability; patching is the only complete remediation.