CVE-2026-32914

creationtimestamp| type| source ---|---|--- 2026-03-29 13:39:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mi7bioted62r 2026-03-29 14:23:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi7dx4p5pe2i 2026-03-29 15:19:56+00:00| published-proof-of-concept|...

CVE-2026-32914 OpenClaw < 2026.3.12 - Insufficient Access Control in /config and /debug Endpoints

OpenClaw before 2026.3.12 contains an insufficient access control vulnerability in the /config and /debug command handlers that allows command-authorized non-owners to access owner-only surfaces. Attackers with command authorization can read or modify privileged configuration settings restricted ...