CyberRota Analysis
AI-GeneratedOpenClaw versions prior to 2026.5.27 are vulnerable to a token leakage issue in Microsoft Teams outbound requests, enabling lower-trust callers to expose sensitive Bot Framework tokens. This vulnerability allows attackers to access configured input paths and retrieve credentials that should be protected. Organizations utilizing OpenClaw in conjunction with Microsoft Teams should prioritize addressing this vulnerability to safeguard their authentication tokens and maintain secure operations.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
OpenClaw versions before 2026.5.27 contain a token leakage vulnerability in MS Teams outbound requests that allows lower-trust callers to expose Bot Framework tokens. Attackers can access configured input paths to retrieve credentials that should remain within the trusted boundary.
Related CVEs
Other vulnerabilities affecting the same vendor(s)