CVE-2026-41349

HIGH

OpenClaw < 2026.3.28 - Agentic Consent Bypass via config.patch

Title source: cna
STIX 2.1

Description

OpenClaw before 2026.3.28 contains an agentic consent bypass vulnerability allowing LLM agents to silently disable execution approval via config.patch parameter. Remote attackers can exploit this to bypass security controls and execute unauthorized operations without user consent.

References (3)

Core 3
Core References
Vendor Advisory vendor-advisory
GitHub Security Advisory (GHSA-v3qc-wrwx-j3pw)
https://github.com/openclaw/openclaw/security/advisories/GHSA-v3qc-wrwx-j3pw
Third Party Advisory third-party-advisory
VulnCheck Advisory: OpenClaw < 2026.3.28 - Agentic Consent Bypass via config.patch
https://www.vulncheck.com/advisories/openclaw-agentic-consent-bypass-via-config-patch

Scores

CVSS v3 8.8
EPSS 0.0047
EPSS Percentile 37.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-862
Status published
Products (3)
OpenClaw/OpenClaw < 2026.3.28
openclaw/openclaw < 2026.3.28
OpenClaw/OpenClaw 2026.3.28
Published Apr 23, 2026
Tracked Since Apr 24, 2026