CVE-2026-34505
1 advisory.
npm/openclaw CVE-2026-34505: medium
OpenClaw: Zalo webhook rate limiting could be bypassed before secret validation
Action: Upgrade openclaw to 2026.3.12 or later.
npm i openclaw@2026.3.12Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2026.3.12 | - |
Fixed versions
| 2026.3.12 |
Sources
- osv: GHSA-5m9r-p9g7-679c
- https://github.com/openclaw/openclaw/security/advisories/GHSA-5m9r-p9g7-679c
- https://nvd.nist.gov/vuln/detail/CVE-2026-34505
- https://github.com/openclaw/openclaw/pull/44173
- https://github.com/openclaw/openclaw/commit/f96ba87f033a14183fa0ede912df3a592eef55ff
- https://github.com/openclaw/openclaw
- https://github.com/openclaw/openclaw/releases/tag/v2026.3.12
- https://www.vulncheck.com/advisories/openclaw-webhook-rate-limiting-bypass-via-pre-authentication-secret-validation
CVE-2026-34505 · published · modified · JSON