OpenClaw 数据伪造问题漏洞

OpenClaw is an open-source intelligent artificial assistant developed by OpenClaw. Versions of OpenClaw from 2026.3.22 to 2026.3.31 had a data manipulation vulnerability. This vulnerability stemmed from a signature verification bypass in the Nostr DM entry path. It allowed unauthorized remote...

CVE-2026-41301: Improper Verification of Cryptographic Signature

OpenClaw versions 2026.3.22 before 2026.3.31 contain a signature verification bypass vulnerability in the Nostr DM ingress path that allows pairing challenges to be issued before event signature validation. An unauthenticated remote attacker can send forged direct messages to create pending pairi...