CVE-2026-41385
OpenClaw < 2026.3.31 - Nostr Private Key Exposure via config.get Redaction Bypass
概要
OpenClaw < 2026.3.31 - Nostr Private Key Exposure via config.get Redaction Bypass
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
OpenClaw before 2026.3.31 stores Nostr privateKey as plaintext in configuration, allowing exposure through config.get method calls that bypass redaction mechanisms. Attackers can retrieve unredacted configuration data to obtain plaintext signing keys used for Nostr protocol operations.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- advisory vulncheck.com
- patch github.com