CVE-2026-43585
EUVD-2026-2818206.05.2026, 20:16
OpenClaw before 2026.4.15 captures resolved bearer-auth configuration at startup, allowing revoked tokens to remain valid after SecretRef rotation. Gateway HTTP and WebSocket handlers fail to re-resolve authentication per-request, enabling attackers to use rotated-out bearer tokens for unauthorized gateway access.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| openclaw | openclaw | 𝑥 < 2026.4.15 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
Vulnerability Media Exposure