CVE-2026-22174

Katalog CVE

CVSS 6.8 · Medium EPSS 0,13%

Kerentanan Missing Authentication for Critical Function pada openclaw. Skor CVSS 3.1 6.8 (Medium) menurut vulncheck.com.

Deskripsi (NVD)

OpenClaw versions prior to 2026.2.22 inject the x-OpenClaw-relay-token header into Chrome CDP probe traffic on loopback interfaces, allowing local processes to capture the Gateway authentication token. An attacker controlling a loopback port can intercept CDP reachability probes to the /json/version endpoint and reuse the leaked token as Gateway bearer authentication.

Rincian

Terbit di NVD

18 Maret 2026

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.8 (Medium), sumber vulncheck.com
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-306: Missing Authentication for Critical Function

EPSS (30 hari)

0,13% peluang dieksploitasi; lebih tinggi dari 2,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/openclaw/openclaw/security/advisories/GHSA-v3j7-34xh-6g3w advisory vendor
• https://github.com/openclaw/openclaw/commit/afa22acc4a09fdf32be8a167ae216bee85c30dad patch
• https://www.vulncheck.com/advisories/openclaw-gateway-token-disclosure-via-chrome-cdp-probe advisory pihak ketiga