Miembros de
Boletines de Vulnerabilidades |
CVE-2026-28469 |
|
| Software afectado | |
| OpenClaw versions prior to 2026.2.14 contain a webhook routing vulnerability in the Google Chat monitor component that allows cross-account policy context misrouting when multiple webhook targets share the same HTTP path. Attackers can exploit first-match request verification semantics to process inbound webhook events under incorrect account contexts, bypassing intended allowlists and session policies. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2026-28469 | |
