CVE-2026-41362 - OpenClaw 2026.2.19 < 2026.3.31 - Webhook Replay Dedupe Cache Event Suppression via Shared Authentication
CVE ID :CVE-2026-41362 Published : April 27, 2026, 11:24 p.m. | 38 minutes ago Description :OpenClaw versions 2026.2.19 before 2026.3.31 contain an improper cache isolation vulnerability in the Zalo webhook replay-dedupe mechanism that is shared across authenticated webhook targets. Attackers
ORIGINAL SOURCE →via CVE Feed Latest
ADVERTISEMENT
⚡ STAY AHEAD
Events like this, convergence-verified across 689 sources, land in your inbox every Sunday. Free.
GET THE SUNDAY BRIEFING →RELATED · cyber
- [CYBER] CVE-2026-7214 - eghuzefa engineer-your-data server.py file_inf path traversal
- [CYBER] CVE-2026-7213 - ef10007 MLOps_MCP save_file Tool fastmcp_server.py path traversal
- [CYBER] CVE-2026-7211 - dvladimirov MCP Git Search API mcp_server.py GitSearchRequest command injection
- [CYBER] CVE-2026-7206 - dubydu sqlite-mcp entry.py extract_to_json sql injection
- [CYBER] CVE-2026-7205 - duartium papers-mcp-server main.py search_papers path traversal
- [CYBER] CVE-2026-7204 - Totolink A8000RU CGI cstecgi.cgi setPptpServerCfg os command injection