CVE-2026-28449 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

OpenClaw versions prior to 2026.2.25 lack durable replay state for Nextcloud Talk webhook events, allowing valid signed webhook requests to be replayed without…
Medium CVSS: 6.3

CVE-2026-28449

OpenClaw versions prior to 2026.2.25 lack durable replay state for Nextcloud Talk webhook events, allowing valid signed webhook requests to be replayed without suppression. Attackers can capture and replay previously valid signed webhook requests to trigger duplicate inbound message processing and cause integrity or availability issues.
Vendor
Openclaw
Product
Openclaw
CWE
CWE-294
Yayın Tarihi
2026-03-19 02:16:02
Güncelleme
2026-03-25 15:16:39
Source Identifier
disclosure@vulncheck.com
KEV Date Added
-

Kategoriler

CWE-294 Openclaw MEDIUM Openclaw 2026

Referanslar

https://github.com/openclaw/openclaw/commit/d512163d686ad6741783e7119ddb3437f493dbbc https://github.com/openclaw/openclaw/security/advisories/GHSA-r9q5-c7qc-p26w https://www.vulncheck.com/advisories/openclaw-webhook-replay-attack-via-missing-durable-replay-suppression