CVE-2026-41349

HIGH

OpenClaw < 2026.3.28 - Agentic Consent Bypass via config.patch

Title source: cna

Description

OpenClaw before 2026.3.28 contains an agentic consent bypass vulnerability allowing LLM agents to silently disable execution approval via config.patch parameter. Remote attackers can exploit this to bypass security controls and execute unauthorized operations without user consent.

References (3)

[Vendor Advisory] https://github.com/openclaw/openclaw/security/advisories/GHSA-v3qc-wrwx-j3pw

[Patch] https://github.com/openclaw/openclaw/commit/76411b2afc4ae721e36c12e0ea24fd23e2fed61e

View Patch ZIP pw:eip

[Third Party Advisory] https://www.vulncheck.com/advisories/openclaw-agentic-consent-bypass-via-config-patch

Scores

CVSS v3 8.8

EPSS 0.0011

EPSS Percentile 28.5%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-862

Status published

Products (2)

OpenClaw/OpenClaw < 2026.3.28

OpenClaw/OpenClaw 2026.3.28

Published Apr 23, 2026

Tracked Since Apr 24, 2026