CVE-2026-41329 | OpenClaw up to 2026.3.30 senderIsOwner incorrect privileged apis (GHSA-g5cg-8x5w-7jpm)

April 21, 2026 Yanac

A vulnerability, which was classified as critical, was found in OpenClaw up to 2026.3.30. This vulnerability affects unknown code. The manipulation of the argument senderIsOwner results in incorrect use of privileged apis.

This vulnerability is identified as CVE-2026-41329. The attack can be executed remotely. There is not any exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More