PT-2026-39688 · Openclaw · Openclaw

Keensecuritylab

+1

·

CVE-2026-44999

·

Published

2026-04-25

·

Updated

2026-05-11

CVSS v4.0

6.3

Medium

VectorAV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.4.20
Description OpenClaw fails to properly preserve untrusted labels for isolated cron awareness events. This allows output from cron agents triggered by webhooks to be recorded as trusted system events. This trust-labeling issue can be exploited to enhance prompt-injection attacks by making untrusted events appear as trusted System events.
Recommendations Update to version 2026.4.20.

Exploit

Fix

Insufficient Verification of Data Authenticity

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-345

Related Identifiers

CVE-2026-44999
GHSA-57R2-H2WJ-G887
GHSA-M5J2-R859-R5CV

Affected Products

Openclaw