CVE-2026-41377
OpenClaw < 2026.3.31 - Fail-Open Security Scan Bypass in Plugin Installation
概要
OpenClaw < 2026.3.31 - Fail-Open Security Scan Bypass in Plugin Installation
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
OpenClaw before 2026.3.31 contains a fail-open vulnerability in the plugin installation flow where security scan failures do not block installation. Attackers can exploit scan failures to install untrusted plugins when operators proceed despite visible scan warnings.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- advisory vulncheck.com
- patch github.com
- patch github.com
- patch github.com
- patch github.com