CYBERHAWK / CVE / CVE-2026-41914

CVE-2026-41914

OpenClaw

HIGH CVSS 8.5 vibe

The flaw

Server-side request forgery in QQ Bot media downloads bypasses SSRF protection.

What to do

Update to version 2026.4.8 or later

▸ Scan my repo for CVE-2026-41914

References

NVD CISA KEV OSV GitHub Advisory MITRE News search
First seen 2026-05-01 · Tracked by PickBits CyberHawk · Weekly CVE digest
← All CVEs RSS Scheduled audits