Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.9

OpenClaw <= 2026.3.31 Accepts Malicious DNS Servers

CVE-2026-41393 · published 6 months ago
Summary

OpenClaw is not properly verifying the authenticity of DNS servers, which allows an attacker on the same network to pose as a trusted DNS server and steal user credentials. This is a serious security risk that can lead to unauthorized access to sensitive information. To fix this, update to version 2026.3.31 or later.

Original advisory text
OpenClaw before 2026.3.31 contains a wide-area discovery vulnerability allowing arbitrary tailnet peers to be accepted as DNS authorities. Attackers with same-tailnet position and CA-trusted endpoi...
OpenClaw before 2026.3.31 contains a wide-area discovery vulnerability allowing arbitrary tailnet peers to be accepted as DNS authorities. Attackers with same-tailnet position and CA-trusted endpoint access can exfiltrate operator credentials through DNS steering manipulation.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
5.9 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-346Origin Validation Error
Timeline
Published28 Apr 2026
Updated26 Oct 2026
First seen28 Apr 2026
Sources
CVE-2026-41393 · NVD
Track software like this
Free during beta