CVE-2026-30741

CRITICAL

OpenClaw Agent Platform 2026.2.6 - RCE

Title source: llm

Description

A remote code execution (RCE) vulnerability in OpenClaw Agent Platform v2026.2.6 allows attackers to execute arbitrary code via a Request-Side prompt injection attack.

References (3)

Scores

CVSS v3 9.8
EPSS 0.0035
EPSS Percentile 57.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-94
Status published
Products (1)
openclaw/openclaw < 2026.2.6
Published Mar 11, 2026
Tracked Since Mar 11, 2026