High severity8.8NVD Advisory· Published May 6, 2026· Updated May 7, 2026

CVE-2026-44110

Description

OpenClaw before 2026.4.15 contains an authorization bypass vulnerability in Matrix room control-command authorization that trusts DM pairing-store entries. Attackers with DM-paired sender IDs can execute room control commands without being in configured allowlists by posting in bot rooms, potentially enabling privileged OpenClaw behavior.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

OpenClaw/Openclaw2 versions
cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*+ 1 more
- cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*range: <2026.4.15
- (no CPE)range: <2026.4.15

Patches

Vulnerability mechanics

References

github.com/openclaw/openclaw/commit/2bfd808a83116bd888e3e2633a61473fa2ed81b6nvdPatch
github.com/openclaw/openclaw/commit/f8705f512b09043df02b5da372c33374734bd921nvdPatch
github.com/advisories/GHSA-2gvc-4f3c-2855ghsaADVISORY
github.com/openclaw/openclaw/security/advisories/GHSA-2gvc-4f3c-2855nvdMitigationVendor Advisory
www.vulncheck.com/advisories/openclaw-authorization-bypass-in-matrix-room-control-commands-via-dm-pairing-storenvdThird Party Advisory
github.com/openclaw/openclaw/pull/67294ghsa
github.com/openclaw/openclaw/pull/67325ghsa
nvd.nist.gov/vuln/detail/CVE-2026-44110ghsa

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000