CVE-2026-33580 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

OpenClaw before 2026.3.28 contains a missing rate limiting vulnerability in the Nextcloud Talk webhook authentication that allows attackers to brute-force weak…
Medium CVSS: 6.3

CVE-2026-33580

OpenClaw before 2026.3.28 contains a missing rate limiting vulnerability in the Nextcloud Talk webhook authentication that allows attackers to brute-force weak shared secrets. Attackers who can reach the webhook endpoint can exploit this to forge inbound webhook events by repeatedly attempting authentication without throttling.
Vendor
Openclaw
Product
Openclaw
CWE
CWE-307
Yayın Tarihi
2026-03-31 15:16:15
Güncelleme
2026-04-01 18:54:45
Source Identifier
disclosure@vulncheck.com
KEV Date Added
-

Kategoriler

CWE-307 Openclaw MEDIUM Openclaw 2026

Referanslar

https://github.com/openclaw/openclaw/commit/e403decb6e20091b5402780a7ccd2085f98aa3cd https://github.com/openclaw/openclaw/security/advisories/GHSA-9528-x887-j2fp https://www.vulncheck.com/advisories/openclaw-brute-force-attack-via-missing-rate-limiting-on-webhook-shared-secret-authentication