CVE-2026-41300
MEDIUM
NVD
CVSS Score
6.5
Severity
MEDIUM
Published
Apr 21, 2026
Vendor
unknown
Description
OpenClaw before 2026.3.31 contains a trust-decline vulnerability that preserves attacker-discovered endpoints in remote onboarding flows. Attackers can route gateway credentials to malicious endpoints by having their discovered URL survive the trust decline process into manual prompts requiring operator acceptance.