CVE-2026-40045 MEDIUM

CVE-2026-40045: OpenClaw < 2026.4.2 - Cleartext Credential Transmission via Unencrypted WebSocket Gateway Endpoints

Vendor Openclaw
Product OpenClaw
Weakness CWE-319 · Cleartext transmission
Published April 20, 2026
Last update April 21, 2026
View on NVD All CVEs

CVSS base score

5.9/10
Attack vector Adjacent
Attack complexity Low
Privileges required None
User interaction —
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

What the vulnerability does

01Description

OpenClaw before 2026.4.2 accepts non-loopback cleartext ws:// gateway endpoints and transmits stored gateway credentials over unencrypted connections. Attackers can forge discovery results or craft setup codes to redirect clients to malicious endpoints, disclosing plaintext gateway credentials.

Key dates

02Disclosure timeline

April 20, 2026 CVE published
April 21, 2026 Record updated