Lucene search
+L

2 matches found

Vulnrichment
Vulnrichment
added 2026/04/09 9:26 p.m.7 views

CVE-2026-34512 OpenClaw < 2026.3.25 - Improper Access Control in /sessions/:sessionKey/kill Endpoint

OpenClaw before 2026.3.25 contains an improper access control vulnerability in the HTTP /sessions/:sessionKey/kill route that allows any bearer-authenticated user to invoke admin-level session termination functions without proper scope validation. Attackers can exploit this by sending authenticat...

8.1CVSS5.9AI score0.00346EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/04/09 9:26 p.m.30 views

CVE-2026-34512 OpenClaw < 2026.3.25 - Improper Access Control in /sessions/:sessionKey/kill Endpoint

OpenClaw before 2026.3.25 contains an improper access control vulnerability in the HTTP /sessions/:sessionKey/kill route that allows any bearer-authenticated user to invoke admin-level session termination functions without proper scope validation. Attackers can exploit this by sending authenticat...

8.1CVSS0.00346EPSS
SaveExploits0References3
Rows per page
Query Builder