CVE-2026-41379: OpenClaw: Gateway operator.write Can Reach Admin-Class Talk Voice Config Persistence via chat.send

April 7, 2026 (updated April 28, 2026)

Gateway operator.write Can Reach Admin-Class Talk Voice Config Persistence via chat.send

References

github.com/advisories/GHSA-3q42-xmxv-9vfr
github.com/openclaw/openclaw/commit/e34694733fc64931ed4a543c73d84ad3435d5df1
github.com/openclaw/openclaw/security/advisories/GHSA-3q42-xmxv-9vfr
nvd.nist.gov/vuln/detail/CVE-2026-41379

Code Behaviors & Features

Detect and mitigate CVE-2026-41379 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →