CVE-2026-30741

A remote code execution RCE vulnerability in OpenClaw Agent Platform v2026.2.6 allows attackers to execute arbitrary code via a Request-Side prompt injection attack...

@0xwork/connect (>=0.1.0, <=0.1.9), @agenr/agenr-plugin (>=1.6.0, <=3.2.0) +170 more potentially affected by CVE-2026-30741 via openclaw (>=0.0.1, <=2026.7.1-2)

openclaw NPM version =0.0.1, =0.1.0, =1.6.0, =1.1.0, =0.1.0, =1.0.5, =0.3.5, =1.0.3, =0.0.1, =0.1.0, =1.0.9, =2026.2.4, =2026.3.3 and more Source cves: CVE-2026-30741 Source advisory: SNYK:JS-OPENCLAW-15627890...

Exploit for CVE-2026-30741

Security Advisory: CVE-2026-30741 Product: OpenClaw Agent Pla...