8.5 HighCWE-290
CVE-2026-44118
OpenClaw vulnerability
Status
- Not in CISA KEV
- Fixed in version 2026.4.22
Exploit probabilityEPSSchecked 25 Oct
0.1%probability of exploitation in the next 30 days
Higher than 3% of scored CVEs
SeverityCVSS
8.5High
Description NVD
OpenClaw before 2026.4.22 derives loopback MCP owner context from spoofable server-issued bearer tokens in request headers. Non-owner loopback clients can present themselves as owner to bypass owner-gated operations by manipulating the sender-owner header metadata.
Coverage 3 articles · 3 outlets
See the full timelineShow as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Fri 15 May · 16:10 UTC | The Hacker News | OpenClaw chain lets attackers hijack config and steal data |
| Mon 18 May · 12:41 UTC | SecurityWeek | ‘Claw Chain’ OpenClaw Flaws Allow Sandbox Escape, Backdoor Delivery |
| Mon 18 May · 22:11 UTC | Dark Reading | OpenClaw bugs enable full system takeover via chained exploits |
- OpenClaw bugs enable full system takeover via chained exploitsDark Reading · mentions it in passing
- ‘Claw Chain’ OpenClaw Flaws Allow Sandbox Escape, Backdoor DeliverySecurityWeek · mentions it in passing
- OpenClaw chain lets attackers hijack config and steal dataThe Hacker News · first in our coverage · mentions it in passing