Plango
Get Plango

For developers

Mac security

← AI agent vulnerabilities

CVE-2026-44118

OpenClaw

7.8
Severity
High
Published
May 6, 2026
Last modified
June 17, 2026

OpenClaw before 2026.4.22 derives loopback MCP owner context from spoofable server-issued bearer tokens in request headers. Non-owner loopback clients can present themselves as owner to bypass owner-gated operations by manipulating the sender-owner header metadata.

CVSS vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness

References

CVE-2026-44118 on NVD

Listed in

HighMCP servers

More OpenClaw CVEs

Jun 16
CVE-2026-538407.1

OpenClaw before 2026.5.12 contains an information disclosure vulnerability in streamable-http MCP servers that forwards operator-configured custom headers during cross-origin redirects.

 May 11
CVE-2026-450017.1

OpenClaw before 2026.4.20 contains a guard bypass vulnerability in the agent-facing gateway config.patch and config.apply endpoints that fails to protect operator-trusted settings including sandbox policy,…

 May 11
CVE-2026-449957.3

OpenClaw before 2026.4.20 contains an improper environment variable validation vulnerability in MCP stdio server configuration that allows attackers to execute arbitrary code.