CyberRota Analysis
AI-GeneratedOpenClaw versions prior to 2026.5.28 are vulnerable due to improper input validation, allowing lower-trust callers to exploit the serviceUrl parameter. This vulnerability can lead to the exposure of sensitive bot tokens and credentials, potentially compromising authentication mechanisms. Organizations utilizing affected versions of OpenClaw should prioritize remediation to safeguard their bot frameworks against unauthorized access.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
OpenClaw versions before 2026.5.28 Bot Framework contains an improper input validation vulnerability that allows lower-trust callers to expose bot tokens and credentials by failing to properly validate serviceUrl parameters. Attackers can supply malicious serviceUrl values through configured input paths to retrieve sensitive authentication data outside the trusted boundary.
Related CVEs
Other vulnerabilities affecting the same vendor(s)