CYBERHAWK / CVE / CVE-2026-43578

CVE-2026-43578

OpenClaw

CRITICAL CVSS 9.1 ai

The flaw

Privilege escalation via heartbeat owner downgrade detection bypass with untrusted completion content.

What to do

Update to OpenClaw 2026.4.10 or later

▸ Scan my repo for CVE-2026-43578

References

First seen 2026-05-08 · Tracked by PickBits CyberHawk · Weekly CVE digest