CVE-2026-8305

A vulnerability was detected in OpenClaw up to 2026.1.24. The impacted element is the function handleBlueBubblesWebhookRequest of the file extensions/bluebubbles/src/monitor.ts of the component bluebubbles Webhook. Performing a manipulation results in improper authentication. It is possible to initiate the attack remotely. The exploit is now public and may be used. Upgrading to version 2026.2.12 is sufficient to resolve this issue. The patch is named a6653be0265f1f02b9de46c06f52ea7c81a836e6. The affected component should be upgraded.

• CWE-287

• https://github.com/Dave-gilmore-aus/security-advisories/blob/main/ClawdBot(aka%20OpenClaw)-Auth-Bypass-SSRFExploit, Mitigation, Vendor Advisory
• https://github.com/openclaw/openclaw/Product
• https://github.com/openclaw/openclaw/commit/a6653be0265f1f02b9de46c06f52ea7c81a836e6Patch
• https://github.com/openclaw/openclaw/issues/13786Exploit, Issue Tracking, Mitigation
• https://github.com/openclaw/openclaw/pull/13787Issue Tracking, Patch
• https://github.com/openclaw/openclaw/releases/tag/v2026.2.12Release Notes
• https://vuldb.com/submit/809371Third Party Advisory, VDB Entry
• https://vuldb.com/vuln/362590Third Party Advisory, VDB Entry
• https://vuldb.com/vuln/362590/ctiPermissions Required, VDB Entry

Published

May 11, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-83044Vulnerability in the Oracle XML Gateway product of Oracle E-…7.1
• CVE-2026-83045Vulnerability in the Oracle WebCenter Portal product of Orac…8.5
• CVE-2026-83046Vulnerability in the Oracle WebCenter Portal product of Orac…7.1
• CVE-2026-83047Vulnerability in the Oracle WebCenter Portal product of Orac…8.2
• CVE-2026-83048Vulnerability in the Oracle WebCenter Portal product of Orac…7.7
• CVE-2026-83049Vulnerability in the Oracle WebCenter Portal product of Orac…8.5
• CVE-2026-83050Vulnerability in the Oracle WebCenter Portal product of Orac…7.1
• CVE-2026-83051Vulnerability in the Oracle WebCenter Portal product of Orac…7.5
• CVE-2026-83052Vulnerability in the Oracle WebCenter Portal product of Orac…7.6
• CVE-2026-83053Vulnerability in the Oracle WebCenter Portal product of Orac…8.8
• CVE-2026-83054Vulnerability in the Oracle Internet Directory product of Or…9.8
• CVE-2026-83055Vulnerability in the Oracle Internet Directory product of Or…9.9