216.73.217.22

CVE-2026-45003

· Published 11/05/2026 18:16 · Modified 12/05/2026 14:20

Labels: CVE-2026-45003 2026-05-11CVE-2026-45003CWE-441[email protected]

Essential information

Published
11/05/2026 18:16
Modified
12/05/2026 14:20
Author
Creator
CVSS
4.1 MEDIUM (v3) 4.1 MEDIUM (v4.0)
CISA KEV
No
CWE
CVSS vector

CVSS metrics

Description

OpenClaw before 2026.4.22 allows workspace dotenv files to override connector endpoint hosts for Matrix, Mattermost, IRC, and Synology connectors. Attackers with workspace access can redirect runtime traffic to malicious endpoints by setting endpoint variables in dotenv files.

NVD status

Status
Undergoing Analysis — CVE has been recently published to the CVE List and has been received by the NVD.
Source
[email protected]
NVD
View on NVD

Affected products (CPE)

ProductCPE
openclaw / openclaw cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:*:*:*

References