Lucene search
+L

2 matches found

CNNVD
CNNVD
•added 2026/04/21 12:00 a.m.•26 views

OpenClaw data falsification vulnerability

OpenClaw is an open-source intelligent artificial assistant developed by OpenClaw. Versions of OpenClaw from 2026.3.22 to 2026.3.31 had a data manipulation vulnerability. This vulnerability stemmed from a signature verification bypass in the Nostr DM entry path. It allowed unauthorized remote...

6.9CVSS5.9AI score0.00253EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/04/20 11:08 p.m.•30 views

EUVD-2026-24010

OpenClaw versions 2026.3.22 before 2026.3.31 contain a signature verification bypass vulnerability in the Nostr DM ingress path that allows pairing challenges to be issued before event signature validation. An unauthenticated remote attacker can send forged direct messages to create pending pairi...

6.9CVSS5.9AI score0.00253EPSS
SaveExploits0References3
Rows per page
Query Builder