← Database

CVE-2026-41393

MEDIUM CVSS: 4.8 Published: 2026-04-28 Modified: 2026-06-17

Description

OpenClaw before 2026.3.31 contains a wide-area discovery vulnerability allowing arbitrary tailnet peers to be accepted as DNS authorities. Attackers with same-tailnet position and CA-trusted endpoint access can exfiltrate operator credentials through DNS steering manipulation.

Affected Platforms

Openclaw Openclaw

Weakness Type

CWE-346

References