CVE-2026-42421 | OpenClaw up to 2026.4.7 Websocket Connection session expiration (GHSA-5h3f-885m-v22w)

April 28, 2026 Yanac

A vulnerability was found in OpenClaw up to 2026.4.7 and classified as critical. This impacts an unknown function of the component Websocket Connection Handler. Executing a manipulation can lead to session expiration.

This vulnerability appears as CVE-2026-42421. The attack may be performed from remote. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More