CVE-2026-43575 CRITICAL

CVE-2026-43575: OpenClaw 2026.2.21 < 2026.4.10 - Authentication Bypass in Sandbox noVNC Helper Route

Vendor Openclaw

Product OpenClaw

Weakness CWE-862 · Missing authorization

Published May 6, 2026

Last update May 7, 2026

View on NVD All CVEs

CVSS base score

9.2/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction None

Confidentiality —

Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

What the vulnerability does

01Description

OpenClaw versions 2026.2.21 before 2026.4.10 contain an authentication bypass vulnerability in the sandbox noVNC helper route that exposes interactive browser session credentials. Attackers can access the noVNC helper route without bridge authentication to gain unauthorized access to the interactive browser session.

Key dates

02Disclosure timeline

May 6, 2026 CVE published

May 7, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2026-43575 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/862.html

Related vulnerabilities

04Related CVE

CVE-2024-31283 WordPress Advanced Local Pickup for WooCommerce plugin <=1.6.2 - Broken Access Control vulnerability CVE-2024-25935 WordPress RegistrationMagic plugin <= 5.2.5.9 - Broken Access Control vulnerability CVE-2025-48784 Soar Cloud HRD Human Resource Management System - Missing Authorization CVE-2025-63034 WordPress Page View Count plugin <= 2.9.0 - Settings Change vulnerability CVE-2026-24982 WordPress Spectra plugin <= 2.19.17 - Broken Access Control vulnerability