PT-2026-26728 · Openclaw · Openclaw
CVSS v3.1
9.1
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
OpenClaw versions prior to 2026.2.21
Description
The software incorrectly applies tokenless Tailscale header authentication to HTTP gateway routes. This allows bypassing token and password requirements for attackers on trusted networks, granting them access to HTTP gateway routes without proper authentication. The issue affects HTTP gateway routes specifically.
Recommendations
Update to version 2026.2.21 or later.
Exploit
Correção
Authentication Bypass by Spoofing
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Openclaw