CVE-2026-44999: OpenClaw < 2026.4.20 - Improper Trust Labeling in Isolated Cron Awareness Events
OpenClaw before 2026.4.20 fails to properly preserve untrusted labels for isolated cron awareness events, allowing webhook-triggered cron agent output to be recorded as trusted system events. Attackers can exploit this trust-labeling issue to strengthen prompt-injection attacks by rendering untrusted events as trusted System events.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-44999?
CVE-2026-44999 is classified as a high severity vulnerability due to its potential to allow the execution of untrusted code as trusted system events.
How do I fix CVE-2026-44999?
To fix CVE-2026-44999, update OpenClaw to version 2026.4.20 or later, which addresses the improper trust labeling issue.
What types of systems are affected by CVE-2026-44999?
CVE-2026-44999 affects all versions of OpenClaw prior to 2026.4.20.
What consequences can arise from exploiting CVE-2026-44999?
Exploiting CVE-2026-44999 can allow attackers to manipulate cron job outputs, leading to potential unauthorized actions or data exposure.
How can I determine if my OpenClaw installation is vulnerable to CVE-2026-44999?
Check your installed version of OpenClaw; if it is below 2026.4.20, it is vulnerable to CVE-2026-44999.