CVE-2026-41353 | THREATINT

Description

OpenClaw before 2026.3.22 contains an access control bypass vulnerability in the allowProfiles feature that allows attackers to circumvent profile restrictions through persistent profile mutation and runtime profile selection. Remote attackers can exploit this by manipulating browser proxy profiles at runtime to access restricted profiles and bypass intended access controls.

PUBLISHED Reserved 2026-04-20 | Published 2026-04-23 | Updated 2026-04-25 | Assigner VulnCheck

HIGH: 7.6CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

HIGH: 8.1CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Problem types

CWE-472 External Control of Assumed-Immutable Web Parameter

Product status

Default status

unaffected

Any version before 2026.3.22

affected

2026.3.22 (semver)

unaffected

Credits

smaeljaish771 reporter

KeenSecurityLab finder

References

github.com/...enclaw/security/advisories/GHSA-h5hg-h7rr-gpf3 (GitHub Security Advisory (GHSA-h5hg-h7rr-gpf3)) vendor-advisory

github.com/...ommit/eac93507c36ccd0c359fba18fa466ef6448be8a5 (Patch Commit) patch

www.vulncheck.com/...-profile-mutation-and-runtime-selection (VulnCheck Advisory: OpenClaw < 2026.3.22 - allowProfiles Bypass via Profile Mutation and Runtime Selection) third-party-advisory

cve.org (CVE-2026-41353)

nvd.nist.gov (CVE-2026-41353)

Download JSON