CVE-2026-28475

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-28475
OpenClaw versions prior to 2026.2.13 use non-constant-time string comparison for hook token validation, allowing attackers to infer tokens through timing measurements. Remote attackers with network access to the hooks endpoint can exploit timing side-channels across multiple requests to gradually recover the authentication token.

4.8 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.2 / Impact : 2.5

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://github.com/openclaw/openclaw/commit/113ebfd6a23c4beb8a575d48f7482593254506ec Patch
https://github.com/openclaw/openclaw/security/advisories/GHSA-47q7-97xp-m272 Vendor Advisory
https://www.vulncheck.com/advisories/openclaw-timing-attack-via-hook-token-comparison Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*
History

11 Mar 2026, 16:17

Type Values Removed Values Added
References () https://github.com/openclaw/openclaw/commit/113ebfd6a23c4beb8a575d48f7482593254506ec - () https://github.com/openclaw/openclaw/commit/113ebfd6a23c4beb8a575d48f7482593254506ec - Patch
References () https://github.com/openclaw/openclaw/security/advisories/GHSA-47q7-97xp-m272 - () https://github.com/openclaw/openclaw/security/advisories/GHSA-47q7-97xp-m272 - Vendor Advisory
References () https://www.vulncheck.com/advisories/openclaw-timing-attack-via-hook-token-comparison - () https://www.vulncheck.com/advisories/openclaw-timing-attack-via-hook-token-comparison - Third Party Advisory
First Time Openclaw openclaw
Openclaw
CPE cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*

09 Mar 2026, 13:36

Type Values Removed Values Added
Summary
  • (es) Las versiones de OpenClaw anteriores a 2026.2.13 utilizan comparación de cadenas de tiempo no constante para la validación de tokens de gancho, permitiendo a los atacantes inferir tokens a través de mediciones de tiempo. Atacantes remotos con acceso de red al punto final de hooks pueden explotar canales laterales de tiempo a través de múltiples solicitudes para recuperar gradualmente el token de autenticación.

05 Mar 2026, 23:16

Type Values Removed Values Added
CVSS v2 : unknown
v3 : 9.8 		v2 : unknown
v3 : 4.8

05 Mar 2026, 22:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-03-05 22:16

Updated : 2026-03-11 16:17

NVD link : CVE-2026-28475

Mitre link : CVE-2026-28475

CVE.ORG link : CVE-2026-28475

JSON object : View

Products Affected

openclaw

  • openclaw
CWE
CWE-208

Observable Timing Discrepancy