Vulnerabilities
Report: Latest: CVE-2026-32914 - OpenClaw < 2026.3.12 - Insufficient Access Control in /config and /debug Endpoints
CVE ID :CVE-2026-32914 Published : March 29, 2026, 1:16 p.m. | 1 hour, 33 minutes ago Description :OpenClaw before 2026.3.12 contains an insufficient access control vulnerability in the /config and /debug command handlers that allows command-authorized non-owners to access owner-only surfaces. Attackers with command authorization can read or modify privileged configuration settings restricted to owners by exploiting missing owner-level permission checks. Severity: 8.8 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...