What CVEs did the FSA identify?

CVE-2026-44109 (auth bypass, CVSS 9.8), CVE-2026-43527 (SSRF), and CVE-2026-43582.

Is this the first government advisory on OpenClaw?

Yes, published May 25, 2026 by the Financial Services Authority.

What is CVE-2026-43527?

SSRF in OpenClaw before v2026.4.14 allowing private-network navigation by default.

How do I patch these CVEs?

Update to OpenClaw v2026.4.14 or later.

Who collaborated on the advisory?

FSA Information Security Team with international vulnerability disclosure organizations.

← Back to dashboard

clawsmith.com/signal/fsa-government-advisory-three-critical-openclaw-cves-may-2026

⚠ IssueWide OpenLive

Financial Services Authority Issues Government Advisory on Three Critical OpenClaw CVEs (CVE-2026-44109, 43527, 43582)

The FSA Information Security Team identified three critical OpenClaw vulnerabilities: CVE-2026-44109 (Feishu webhook auth bypass, CVSS 9.8), CVE-2026-43527 (SSRF via private network navigation), CVE-2026-43582. Published May 25, 2026. First government-level security advisory targeting OpenClaw.

Product Idea from this Signal

A CLI tool that audits self-hosted AI agent deployments against government security advisories, CVE databases, and compliance frameworks with auto-remediation scripts

157 ▲

The Financial Services Authority published the first government-level security advisory against OpenClaw on May 25, 2026, identifying three critical CVEs. OpenClaw has accumulated 138+ CVEs in 63 days. 63% of 500K+ exposed instances have no authentication configured. EU AI Act full enforcement starts August 2, 2026. Enterprise and government teams running self-hosted AI agents have no automated way to check their deployments against the growing list of government advisories, CVEs, and compliance requirements. This tool scans a running agent deployment, cross-references against CVE databases and government advisory feeds, checks authentication and network exposure, and generates a compliance report with remediation scripts.

CLIOPEN-SOURCESECURITYCOMPLIANCEENTERPRISE

CompetitiveView Opportunity →