All our openclaw news

Cve 2026 44118

OpenClaw CVE-2026-44118: Loopback MCP Owner-Context Spoofing via Bearer-Token Header Manipulation — Cyber-Risk Implications for Underwriters, CISOs and Risk Managers

CVE-2026-44118 (CVSS 7.8) lets non-owner loopback MCP clients bypass owner-gated operations in OpenClaw before 2026.4.22 by spoofing the sender-owner header. Trust-boundary defect risk-signal for underwriters, CISOs and risk managers.

Michael Guiao

15 min read

OpenClaw CVE-2026-44118: Loopback MCP Owner-Context Spoofing via Bearer-Token Header Manipulation — Cyber-Risk Implications for Underwriters, CISOs and Risk Managers
OpenClaw Authentication Bypass Exposes Browser Sessions: A Coverage Red Flag for Cyber Underwriters
Openclaw · · 6 min read

OpenClaw Authentication Bypass Exposes Browser Sessions: A Coverage Red Flag for Cyber Underwriters

CVE-2026-43575 (CVSS 9.8) is an unauthenticated authentication bypass in OpenClaw noVNC helper routes that exposes browser session credentials — a coverage- and renewal-relevant risk for any cyber underwriter writing errors-and-omissions, crime, or cyber liability for environments using sandboxed browser-based access.

OpenClaw CVE-2026-43575: Critical Authentication Bypass Risks for Cyber Insurers
Cve 2026 43575 · · 7 min read

OpenClaw CVE-2026-43575: Critical Authentication Bypass Risks for Cyber Insurers

CVE-2026-43575 exposes OpenClaw sandbox users to credential theft. Learn how this 9.8 CVSS flaw impacts cyber insurance underwriting and claims.

OpenClaw Privilege Escalation Weakens Sandbox Isolation: A New Renewal Question for Cyber Insurers
Openclaw · · 6 min read

OpenClaw Privilege Escalation Weakens Sandbox Isolation: A New Renewal Question for Cyber Insurers

CVE-2026-43578 (CVSS 9.1) lets unprivileged actors escalate to root in OpenClaw via background-task verification flaws — renewing cyber underwriters should add sandboxed-orchestrator exposure to the renewal file.

blog.featured

AI Tooling RCE: The Sublimit Layer Underwriters Rarely Underwrite

Cyber Insurance ·

9 min read

SolarWinds SAML Bypass: The IT Ticketing Supply-Chain Path

Cyber Insurance ·

9 min read

AM Best and S&P Flag Cyber Pricing Risks: What Underwriters Should Do at Renewal

Cyber Insurance ·

7 min read

One Salesforce Integration Breach Just Hit 200 Cyber Insureds

Cyber Insurance ·

8 min read

Premium Report

2026 Cyber Risk Landscape Report

24 pages of threat analysis, claims data, and underwriting implications for European cyber insurance.

View Reports →