← Vulnerability feed

Vulnerability record · CVE-2026-30741 · published 11 March 2026

CVE-2026-30741: Openclaw code injection vulnerability

Openclaw · Openclaw

A remote code execution (RCE) vulnerability in OpenClaw Agent Platform v2026.2.6 allows attackers to execute arbitrary code via a Request-Side prompt injection attack.

9.8 CVSS 3.1 Critical EPSS 1.2% · top 33.5% CWE-94 · Code injection
9.8CVSS 3.1 base score
1.2%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
3References, 2 tagged exploit
17 Jun 2026Last modified by NVD

Description

A remote code execution (RCE) vulnerability in OpenClaw Agent Platform v2026.2.6 allows attackers to execute arbitrary code via a Request-Side prompt injection attack.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://github.com/Named1ess/CVE-2026-30741 Exploit
https://github.com/OpenClaw/OpenClaw Product
https://www.bilibili.com/video/BV1LoFazeEBM Exploit

Track CVE-2026-30741 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.4CVE-2026-33579Openclaw incorrect authorization vulnerabilityOpenClaw before 2026.3.28 contains a privilege escalation vulnerability in the /pair approve command path that fails to forward caller scopes into th…EPSS 0.51%9.4CVE-2026-32978Openclaw incorrect authorization vulnerabilityOpenClaw before 2026.3.11 contains an approval integrity vulnerability where system.run approvals fail to bind mutable file operands for certain scri…EPSS 0.32%9.4CVE-2026-32922Openclaw vulnerabilityOpenClaw before 2026.3.11 contains a privilege escalation vulnerability in device.token.rotate that allows callers with operator.pairing scope to min…EPSS 0.69%9.4CVE-2026-22172Openclaw missing authorization vulnerabilityOpenClaw versions prior to 2026.3.12 contain an authorization bypass vulnerability in the WebSocket connect path that allows shared-token or password…EPSS 0.56%9.4CVE-2026-28466Openclaw incorrect authorization vulnerabilityOpenClaw versions prior to 2026.2.14 contain a vulnerability in the gateway in which it fails to sanitize internal approval fields in node.invoke par…EPSS 0.67%9.3CVE-2026-43534Openclaw insufficient verification of data authenticity vulnerabilityOpenClaw before 2026.4.10 contains an input validation vulnerability that allows external hook metadata to be enqueued as trusted system events. Atta…EPSS 0.30%9.3CVE-2026-32987Openclaw authentication bypass by capture-replay vulnerabilityOpenClaw before 2026.3.13 allows bootstrap setup codes to be replayed during device pairing verification in src/infra/device-bootstrap.ts. Attackers …EPSS 0.61%9.3CVE-2026-32915Openclaw incorrect authorization vulnerabilityOpenClaw before 2026.3.11 contains a sandbox boundary bypass vulnerability allowing leaf subagents to access the subagents control surface and resolv…EPSS 0.16%

Source: NIST National Vulnerability Database (record CVE-2026-30741), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.