CVE-2026-32982

OpenClaw prior to 2026.3.13 contains an information disclosure vulnerability in the fetchRemoteMedia function that exposes Telegram bot tokens. When media downloads fail, original Telegram file URLs (containing bot tokens) can be embedded in MediaFetchError strings and leaked to logs and error su...

CVE-2026-32982 OpenClaw < 2026.3.13 - Telegram Bot Token Exposure in Media Fetch Error Logs

OpenClaw before 2026.3.13 contains an information disclosure vulnerability in the fetchRemoteMedia function that exposes Telegram bot tokens in error messages. When media downloads fail, the original Telegram file URLs containing bot tokens are embedded in MediaFetchError strings and leaked to lo...

CVE-2026-32982: Insertion of Sensitive Information into Log File

OpenClaw before 2026.3.13 contains an information disclosure vulnerability in the fetchRemoteMedia function that exposes Telegram bot tokens in error messages. When media downloads fail, the original Telegram file URLs containing bot tokens are embedded in MediaFetchError strings and leaked to lo...

OpenClaw 日志信息泄露漏洞

OpenClaw is an open-source intelligent artificial assistant developed by OpenClaw. Versions of OpenClaw prior to 2026.3.13 had a log information leakage vulnerability. This vulnerability stemmed from the fetchRemoteMedia function, which had a flaw that could lead to log information being exposed ...

PT-2026-29234

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.3.13 Description The software contains an information disclosure issue within the fetchRemoteMedia function. This can lead to the exposure of Telegram bot tokens in error messages. Specifically, when media...