Four Open Claw Flaws Enable Data Theft, Privilege Escalation, and Persistence

Summary: Cyera disclosed four OpenClaw flaws, collectively dubbed Claw Chain, that can be chained to achieve data theft, privilege escalation, and persistence, with CVE-2026-44112 allowing configuration tampering and backdoor planting and CVE-2026-44113 allowing reads of system files, credentials, and internal artifacts. The root cause of CVE-2026-44118 is that OpenClaw trusted a client-controlled senderIsOwner flag without validating it against the authenticated session; all four flaws are fixed in OpenClaw version 2026.4.22, and researcher Vladimir Tokarev is credited with reporting them.
What's compelling: Cyera notes each step of the chain looks like normal agent behavior to traditional controls, so an adversary using the agent as its hands inside the environment broadens blast radius while making detection significantly harder.

Read the original at The Hacker News ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2026-44112 CVE-2026-44113 CVE-2026-44118
Related: ⚡ Weekly Recap: Exchange 0-Day, npm Worm, Fake AI Repo, Cisco Exploit and More Cyber Risks ·
Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026