How does CVE-2026-41353 bypass access controls?

Through persistent profile mutation and runtime profile selection, attackers can change their active profile to one with elevated permissions, bypassing allowProfiles restrictions.

Is CVE-2026-41353 actively exploited?

No public reports of active exploitation yet, but the vulnerability is straightforward to exploit given access to the API.

Which versions are affected by CVE-2026-41353?

OpenClaw before v2026.3.22 is affected. Upgrade to v2026.3.22 or later to patch.

What is CVE-2026-41353?

A CVSS 8.1 access control bypass vulnerability in OpenClaw's allowProfiles feature that lets attackers circumvent profile restrictions.

← Back to dashboard

clawsmith.com/signal/cve-2026-41353-profile-access-control-bypass

⚠ IssueWide OpenLive

CVE-2026-41353: OpenClaw allowProfiles access control bypass via persistent profile mutation (CVSS 8.1)

Access control bypass in the allowProfiles feature lets attackers circumvent profile restrictions through persistent profile mutation and runtime profile selection. Disclosed April 23, 2026. Affects OpenClaw before v2026.3.22.

Product Idea from this Signal

A CLI tool that audits OpenClaw device token scopes and blocks privilege escalation paths before attackers exploit them

1.4k ▲

CVE-2026-32922 (CVSS 9.9) proved that a single API call to device.token.rotate can escalate any paired device to full admin. The root cause was missing scope validation, but the broader problem is that OpenClaw operators have zero visibility into which devices hold what scopes, which tokens have been rotated suspiciously, and whether their instance is still vulnerable. 137 security advisories were filed in 60 days. This CLI tool continuously audits device tokens, flags over-scoped devices, detects rotation anomalies, and blocks escalation attempts at the gateway level.

SECURITYCLIDEVTOOLOPEN-SOURCE

CompetitiveView Opportunity →

Product Idea from this Signal

A CLI tool that validates OpenClaw workspace integrity and blocks .env injection, config poisoning, and prompt injection before the agent boots

1.7k ▲

OpenClaw loads .env files from the current working directory before its trusted configuration, and trusts heartbeat context inheritance without proper validation. CVE-2026-41294 (CVSS 8.6) and CVE-2026-41329 (CVSS 9.9) exploit these pre-boot trust assumptions. With 138+ CVEs tracked in 63 days and 397-point HN posts calling the platform a security nightmare, operators need a pre-boot safety gate that catches workspace-level attacks before the agent gets any execution context.

CLISECURITYOPEN-SOURCEDEVTOOLPRE-BOOT

CompetitiveView Opportunity →