Report: CVE-2026-34505 - OpenClaw < 2026.3.12 - Webhook Rate Limiting Bypass via Pre-Authentication Secre

Report: CVE-2026-34505 - OpenClaw < 2026.3.12 - Webhook Rate Limiting Bypass via Pre-Authentication Secre

CVE ID :CVE-2026-34505 Published : March 31, 2026, 11:17 a.m. | 39 minutes ago Description :OpenClaw before 2026.3.12 applies rate limiting only after successful webhook authentication, allowing attackers to bypass rate limits and brute-force webhook secrets. Attackers can submit repeated authentication requests with invalid secrets without triggering rate limit responses, enabling systematic secret guessing and subsequent forged webhook submission. Severity: 9.8 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE Details

Severity
CRITICAL
Published
March 31, 2026