CVE-2026-41356: OpenClaw < 2026.3.31 - Incomplete WebSocket Session Termination in device.token.rotate
OpenClaw before 2026.3.31 fails to terminate active WebSocket sessions when rotating device tokens. Attackers with previously compromised credentials can maintain unauthorized access through existing WebSocket connections after token rotation.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-41356?
CVE-2026-41356 is considered a critical vulnerability due to its potential for unauthorized access through incomplete WebSocket session termination.
How do I fix CVE-2026-41356?
To fix CVE-2026-41356, upgrade OpenClaw to version 2026.3.31 or later, which includes the necessary fix for WebSocket session termination.
What impact does CVE-2026-41356 have on my system?
CVE-2026-41356 allows attackers with compromised credentials to maintain access to your system, which could lead to data breaches.
What software is affected by CVE-2026-41356?
CVE-2026-41356 affects OpenClaw versions prior to 2026.3.31.
Can existing users of OpenClaw be compromised due to CVE-2026-41356?
Yes, existing users can be compromised if attackers exploit the incomplete session termination in WebSocket communications.