Cyber Resilience

CVE-2026-41300

Openclaw ≤ 2026.3.31

Public PoC
Published
21 April 2026
Modified
27 April 2026
Patch / advisory
View advisory
CVSS Score v4 6.9
Click a component to see what it means
Raw vectorCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
EPSS Score 0.0025 17th percentile
Risk Priority 35 floored blend · peak EPSS

Summary

CVE-2026-41300 is a medium-severity Incomplete Internal State Distinction (CWE-372) vulnerability in Openclaw Openclaw. Its CVSS base score is 6.9 (Medium).

Operationally, exploitation aligns with the MITRE ATT&CK technique External Remote Services (T1133); ranked at the 17th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

The strongest mitigations our analysis identified map to AC-17 (Remote Access) and AC-4 (Information Flow Enforcement) — see the control section below for these in your framework.

EU & UK References

Vulnerability Data

OpenClaw before 2026.3.31 contains a trust-decline vulnerability that preserves attacker-discovered endpoints in remote onboarding flows. Attackers can route gateway credentials to malicious endpoints by having their discovered URL survive the trust decline process into manual prompts requiring operator acceptance.

CWE(s)
CWE-372

Related Threats

MITRE ATT&CK Enterprise TechniquesAI

T1133 External Remote Services Persistence
Adversaries may leverage external-facing remote services to initially access and/or persist within a network.
attack.mitre.org →
T1557 Adversary-in-the-Middle Credential Access
Adversaries may attempt to position themselves between two or more networked devices using an adversary-in-the-middle (AiTM) technique to support follow-on behaviors such as [Network Sniffing](https://attack.
attack.mitre.org →
Why these techniques?

Vulnerability in remote onboarding trust handling directly enables acceptance of attacker-supplied malicious endpoints for credential routing, facilitating external remote service abuse and adversary-in-the-middle attacks.

Confidence: HIGH · MITRE ATT&CK Enterprise v19.0

CVEs Like This One

CVE-2026-41388Same product: Openclaw Openclaw
CVE-2026-41340Same product: Openclaw Openclaw
CVE-2026-40045Same product: Openclaw Openclaw
CVE-2026-42421Same product: Openclaw Openclaw
CVE-2026-41342Same product: Openclaw Openclaw
CVE-2026-45003Same product: Openclaw Openclaw
CVE-2026-34503Same product: Openclaw Openclaw
CVE-2026-41916Same product: Openclaw Openclaw
CVE-2026-53817Same product: Openclaw Openclaw
CVE-2026-53843Same product: Openclaw Openclaw

Affected Assets

openclaw
openclaw
≤ 2026.3.31

Mitigating Controls

Control response

Prevent
Stop it (NIST 800-53)
  • AC-17 Remote Access
  • AC-4 Information Flow Enforcement
  • SI-10 Information Input Validation
Detect
Catch it (NIST detect / respond)

—

Harden
Shrink the surface (DISA STIG)

—

Validate
Prove the fix (OWASP ASVS)

—

Mitigating Controls (NIST 800-53 r5) AI

AC-17 Remote Access good match
prevent

Directly governs remote access onboarding flows and endpoint acceptance decisions that the CVE exploits to route credentials.

AC-4 Information Flow Enforcement good match
prevent

Enforces information flow rules so that discovered endpoints cannot be used to exfiltrate gateway credentials after trust decline.

SI-10 Information Input Validation partial match
prevent

Requires validation of externally supplied URLs/endpoints before they reach manual prompts or credential routing.

Mitigating Controls (NIST CSF 2.0) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→CSF cross-walk (authority under review) — links open the control.

PR.PS-06 mostly match
prevents

Secure SDLC activities directly address proper state-machine design and testing that prevent incomplete state distinction.

ID.RA-01 partial match
prevents

Identifying recorded vulnerabilities can surface this class of state-management flaw during assessments.

Mitigating Controls (ISO/IEC 27001:2022 Annex A) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→ISO cross-walk (authority under review) — links open the control.

A.8.29 Security testing in development and acceptance mostly match
detects

Security testing can detect state-machine flaws that manifest as incomplete internal state distinction.

A.8.25 Secure development life cycle partial match
prevents

Secure development lifecycle practices can include state-machine validation and invariant checks that reduce incomplete internal state errors.

A.8.26 Application security requirements partial match
prevents

Explicit application security requirements can mandate state-transition validation and error-state handling.

A.8.27 Secure system architecture and engineering principles partial match
prevents

Secure architecture principles encourage explicit state modelling and fail-safe transitions.

A.8.28 Secure coding partial match
prevents

Secure coding standards can require defensive checks against invalid or ambiguous internal states.

A.8.32 Change management partial match
prevents

Change-management procedures may indirectly catch state-related defects during release reviews.

References