Vulnerabilities

CVSS

7.8 High

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Risk score

62.4

Published

2026-05-06

Status

Analyzed

OpenClaw before 2026.4.22 derives loopback MCP owner context from spoofable server-issued bearer tokens in request headers. Non-owner loopback clients can present themselves as owner to bypass owner-gated operations by manipulating the sender-owner header metadata.

Weaknesses

CWE-290

Coverage 1

threat-intel

'Claw Chain' Vulnerabilities Threaten OpenClaw Deployments

New vulnerabilities, dubbed 'Claw Chain,' have been discovered in the OpenClaw open-source AI agent framework, posing a significant risk to deployments. These four flaws – CVE-2026-44112, CVE-2026-44115, CVE-2026-44118,…

Dark Reading · May 18, 2026 Critical

CVE-2026-44112CVE-2026-44115CVE-2026-44118aiagentvulnerability

All articles mentioning it

Advisories and references

• github.com/openclaw/openclaw/commit/3cb1a56bfc9579a0f2336f9cfa12a8a7...
• github.com/openclaw/openclaw/security/advisories/GHSA-r6xh-pqhr-v4xh
• vulncheck.com/advisories/openclaw-owner-context-spoofing-via-bearer-...