EUVD-2026-13972PublishedWithdrawn
OpenClaw < 2026.2.21 - Unauthenticated Webhook Access via Passwordless Fallback in BlueBubbles Plugin
Related advisories and sources
Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.
CVE-2026-32896 · CVE overview and exploitation status
cve-program · CVE-2026-32896
- https://github.com/openclaw/openclaw/security/advisories/GHSA-5mx2-2mgw-x8rm
- https://github.com/openclaw/openclaw/commit/6b2f2811dc623e5faaf2f76afaa9279637174590
- https://github.com/openclaw/openclaw/commit/283029bdea23164ab7482b320cb420d1b90df806
- https://www.vulncheck.com/advisories/openclaw-unauthenticated-webhook-access-via-passwordless-fallback-in-bluebubbles-plugin
euvd · EUVD-2026-13972
- https://github.com/openclaw/openclaw/security/advisories/GHSA-5mx2-2mgw-x8rm
- https://github.com/openclaw/openclaw/commit/6b2f2811dc623e5faaf2f76afaa9279637174590
- https://github.com/openclaw/openclaw/commit/283029bdea23164ab7482b320cb420d1b90df806
- https://www.vulncheck.com/advisories/openclaw-unauthenticated-webhook-access-via-passwordless-fallback-in-bluebubbles-plugin
nvd · CVE-2026-32896
- https://github.com/openclaw/openclaw/commit/283029bdea23164ab7482b320cb420d1b90df806
- https://github.com/openclaw/openclaw/commit/6b2f2811dc623e5faaf2f76afaa9279637174590
- https://github.com/openclaw/openclaw/security/advisories/GHSA-5mx2-2mgw-x8rm
- https://www.vulncheck.com/advisories/openclaw-unauthenticated-webhook-access-via-passwordless-fallback-in-bluebubbles-plugin
osv · GHSA-5mx2-2mgw-x8rm
- https://github.com/openclaw/openclaw/security/advisories/GHSA-5mx2-2mgw-x8rm
- https://nvd.nist.gov/vuln/detail/CVE-2026-32896
- https://github.com/openclaw/openclaw/commit/283029bdea23164ab7482b320cb420d1b90df806
- https://github.com/openclaw/openclaw/commit/6b2f2811dc623e5faaf2f76afaa9279637174590
- https://github.com/openclaw/openclaw
- https://www.vulncheck.com/advisories/openclaw-unauthenticated-webhook-access-via-passwordless-fallback-in-bluebubbles-plugin
osv · GHSA-vh4c-j2xv-9pv9
- https://github.com/openclaw/openclaw/security/advisories/GHSA-5mx2-2mgw-x8rm
- https://nvd.nist.gov/vuln/detail/CVE-2026-32896
- https://github.com/openclaw/openclaw/commit/283029bdea23164ab7482b320cb420d1b90df806
- https://github.com/openclaw/openclaw/commit/6b2f2811dc623e5faaf2f76afaa9279637174590
- https://www.vulncheck.com/advisories/openclaw-unauthenticated-webhook-access-via-passwordless-fallback-in-bluebubbles-plugin
Related changes
Linked by CVE identifierNo related changes are available here.