CVE-2026-25474

OpenClaw is a personal AI assistant. In versions 2026.1.30 and below, if channels.telegram.webhookSecret is not set when in Telegram webhook mode, OpenClaw may accept webhook HTTP requests without verifying Telegram’s secret token header. In deployments where the webhook endpoint is reachable by an attacker, this can allow forged Telegram updates (for example spoofing message.from.id). If an attacker can reach the webhook endpoint, they may be able to send forged updates that are processed as if they came from Telegram. Depending on enabled commands/tools and configuration, this could lead to unintended bot actions. Note: Telegram webhook mode is not enabled by default. It is enabled only when `channels.telegram.webhookUrl` is configured. This issue has been fixed in version 2026.2.1.

• CWE-345

• https://github.com/openclaw/openclaw/commit/3cbcba10cf30c2ffb898f0d8c7dfb929f15f8930Patch
• https://github.com/openclaw/openclaw/commit/5643a934799dc523ec2ef18c007e1aa2c386b670Patch
• https://github.com/openclaw/openclaw/commit/633fe8b9c17f02fcc68ecdb5ec212a5ace932f09Patch
• https://github.com/openclaw/openclaw/commit/ca92597e1f9593236ad86810b66633144b69314dPatch
• https://github.com/openclaw/openclaw/releases/tag/v2026.2.1Product, Release Notes
• https://github.com/openclaw/openclaw/security/advisories/GHSA-mp5h-m6qj-6292Exploit, Mailing List, Patch, Vendor Advisory

Published

Feb 19, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-25469Missing Authorization vulnerability in ViaBill for WooCommer…6.5
• CVE-2026-2547A vulnerability was detected in LigeroSmart up to 6.1.26. Th…6.1
• CVE-2026-25470Improper Control of Generation of Code ('Code Injection') vu…10
• CVE-2026-25471Authentication Bypass Using an Alternate Path or Channel vul…8.1
• CVE-2026-25472Improper Neutralization of Input During Web Page Generation …6.5
• CVE-2026-25473Missing Authorization vulnerability in AA-Team WZone woozone…5.4
• CVE-2026-25475OpenClaw is a personal AI assistant. Prior to version 2026.1…6.5
• CVE-2026-25476OpenEMR is a free and open source electronic health records …7.5
• CVE-2026-25477AFFiNE is an open-source, all-in-one workspace and an operat…6.1
• CVE-2026-25478Litestar is an Asynchronous Server Gateway Interface (ASGI) …6.5
• CVE-2026-25479Litestar is an Asynchronous Server Gateway Interface (ASGI) …6.5
• CVE-2026-2548A flaw has been found in WAYOS FBM-220G 24.10.19. This affec…6.3