CVE-2026-41377 | OpenClaw up to 2026.3.30 Plugin Installation failing open (GHSA-cwq8-6f96-g3q4)

April 28, 2026 Yanac

A vulnerability categorized as critical has been discovered in OpenClaw up to 2026.3.30. Impacted is an unknown function of the component Plugin Installation Handler. Executing a manipulation can lead to not failing securely.

This vulnerability is handled as CVE-2026-41377. The attack can be executed remotely. There is not any exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More