CyberRota
Back to database

CVE-2026-41380

HIGH · CVSS 7.3 EPSS 0.02% Public Exploit

Source: NVD + CISA KEV + EPSS · Published: 2026-04-28 · Last synced: 2026-05-28

CyberRota Analysis

Detaylı analiz gerekiyor.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit
GitHub PoC Links
github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-41380
Severity
HIGH
CVSS
7.3
EPSS
0.02%

Original NVD Description

OpenClaw before 2026.3.28 contains an execution approval vulnerability in exec-approvals-allowlist.ts that allows allow-always persistence to trust wrapper carrier executables instead of invoked targets. Attackers can exploit positional carrier executable routing through dispatch wrappers to establish broader allowlist entries than intended, weakening execution approval boundaries.