CVE-2026-34509

MEDIUM

OpenClaw < 2026.3.8 - Sender Allowlist Bypass in Microsoft Teams Plugin via Route Allowlist Configuration

Title source: cna

Description

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

References (3)

Scores

CVSS v3 4.3
EPSS 0.0003
EPSS Percentile 6.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Details

CWE
CWE-863
Status published
Products (2)
OpenClaw/OpenClaw < 2026.3.8
OpenClaw/OpenClaw 2026.3.8
Published Mar 31, 2026
Tracked Since Mar 31, 2026