CVE-2026-41358 | OpenClaw up to 2026.4.1 Allowlisted Message origin validation (GHSA-qm77-8qjp-4vcm)

April 24, 2026 Yanac

A vulnerability was found in OpenClaw up to 2026.4.1. It has been classified as critical. Affected by this vulnerability is an unknown functionality of the component Allowlisted Message Handler. The manipulation leads to origin validation error.

This vulnerability is referenced as CVE-2026-41358. Remote exploitation of the attack is possible. No exploit is available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More