CVE-2026-27004

OpenClaw is a personal AI assistant. Prior to version 2026.2.15, in some shared-agent deployments, OpenClaw session tools (`sessions_list`, `sessions_history`, `sessions_send`) allowed broader session targeting than some operators intended. This is primarily a configuration/visibility-scoping issue in multi-user environments where peers are not equally trusted. In Telegram webhook mode, monitor startup also did not fall back to per-account `webhookSecret` when only the account-level secret was configured. In shared-agent, multi-user, less-trusted environments: session-tool access could expose transcript content across peer sessions. In single-agent or trusted environments, practical impact is limited. In Telegram webhook mode, account-level secret wiring could be missed unless an explicit monitor webhook secret override was provided. Version 2026.2.15 fixes the issue.

• CWE-209
• CWE-346

• https://github.com/openclaw/openclaw/commit/c6c53437f7da033b94a01d492e904974e7bda74cPatch
• https://github.com/openclaw/openclaw/security/advisories/GHSA-6hf3-mhgc-cm65Mitigation, Vendor Advisory

Published

Feb 20, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-26997ClipBucket v5 is an open source video sharing platform. Prio…5.4
• CVE-2026-26998Traefik is an HTTP reverse proxy and load balancer. Prior to…4.4
• CVE-2026-26999Traefik is an HTTP reverse proxy and load balancer. Prior to…7.5
• CVE-2026-27001OpenClaw is a personal AI assistant. Prior to version 2026.2…7.8
• CVE-2026-27002OpenClaw is a personal AI assistant. Prior to version 2026.2…9.8
• CVE-2026-27003OpenClaw is a personal AI assistant. Telegram bot tokens can…5.5
• CVE-2026-27005Chartbrew is an open-source web application that can connect…9.8
• CVE-2026-27007OpenClaw is a personal AI assistant. Prior to version 2026.2…3.3
• CVE-2026-27008OpenClaw is a personal AI assistant. Prior to version 2026.2…6.7
• CVE-2026-27009OpenClaw is a personal AI assistant. Prior to version 2026.2…5.8
• CVE-2026-2701Authenticated user can upload a malicious file to the server…8.8
• CVE-2026-27012OpenSTAManager is an open source management software for tec…9.8