{"id":"CVE-2026-43579","state":"PUBLISHED","title":"OpenClaw < 2026.4.10 - Insufficient Access Control in Nostr Profile Mutation Routes","description":"OpenClaw before 2026.4.10 contains an insufficient access control vulnerability in Nostr plugin HTTP profile routes that allows operators with write permissions to persist profile configuration without requiring admin authority. Attackers with operator.write scope can modify Nostr profile settings through unprotected mutation endpoints to gain unauthorized configuration persistence.","publishedAt":"2026-05-06T19:49:22.588Z","updatedAt":"2026-05-07T13:54:07.716Z","severity":{"score":6,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","source":"VulnCheck"},"assigner":"VulnCheck","products":["OpenClaw OpenClaw"],"affected":[{"vendor":"OpenClaw","product":"OpenClaw","packageURL":"pkg:npm/openclaw","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"2026.4.10","versionType":"semver"},{"version":"2026.4.10","status":"unaffected","versionType":"semver"}]}],"references":["https://github.com/openclaw/openclaw/security/advisories/GHSA-f3h5-h452-vp3j","https://github.com/openclaw/openclaw/commit/6517c700de9bb0ee11b41ab625ef3b63d01b6083","https://www.vulncheck.com/advisories/openclaw-insufficient-access-control-in-nostr-profile-mutation-routes"],"weaknesses":["CWE-862"],"ingestedAt":"2026-10-29T20:11:57.932Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/43xxx/CVE-2026-43579.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-43579","state":"PUBLISHED","datePublished":"2026-05-06T19:49:22.588Z","dateUpdated":"2026-05-07T13:54:07.716Z","assignerShortName":"VulnCheck","assignerOrgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","dateReserved":"2026-05-01T17:00:54.537Z"},"containers":{"cna":{"title":"OpenClaw < 2026.4.10 - Insufficient Access Control in Nostr Profile Mutation Routes","descriptions":[{"lang":"en","value":"OpenClaw before 2026.4.10 contains an insufficient access control vulnerability in Nostr plugin HTTP profile routes that allows operators with write permissions to persist profile configuration without requiring admin authority. Attackers with operator.write scope can modify Nostr profile settings through unprotected mutation endpoints to gain unauthorized configuration persistence."}],"affected":[{"vendor":"OpenClaw","product":"OpenClaw","packageURL":"pkg:npm/openclaw","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"2026.4.10","versionType":"semver"},{"version":"2026.4.10","status":"unaffected","versionType":"semver"}]}],"references":[{"url":"https://github.com/openclaw/openclaw/security/advisories/GHSA-f3h5-h452-vp3j","name":"GitHub Security Advisory (GHSA-f3h5-h452-vp3j)","tags":["vendor-advisory"]},{"url":"https://github.com/openclaw/openclaw/commit/6517c700de9bb0ee11b41ab625ef3b63d01b6083","name":"Patch Commit","tags":["patch"]},{"url":"https://www.vulncheck.com/advisories/openclaw-insufficient-access-control-in-nostr-profile-mutation-routes","name":"VulnCheck Advisory: OpenClaw < 2026.4.10 - Insufficient Access Control in Nostr Profile Mutation Routes","tags":["third-party-advisory"]}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV4_0":{"attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","userInteraction":"NONE","vulnConfidentialityImpact":"NONE","subConfidentialityImpact":"NONE","vulnIntegrityImpact":"HIGH","subIntegrityImpact":"NONE","vulnAvailabilityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","version":"4.0","baseSeverity":"MEDIUM","baseScore":6,"vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}},{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE","version":"3.1","baseSeverity":"MEDIUM","baseScore":6.5,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-862","lang":"en","description":"CWE-862 Missing Authorization","type":"CWE"}]}],"providerMetadata":{"shortName":"VulnCheck","orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","dateUpdated":"2026-05-06T19:49:22.588Z"},"tags":["x_open-source"],"datePublic":"2026-04-16T00:00:00.000Z","cpeApplicability":[{"nodes":[{"operator":"OR","cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*","versionEndExcluding":"2026.4.10"}]}]}],"credits":[{"lang":"en","value":"Peng Zhou (@zpbrent)","type":"reporter"}],"x_generator":{"engine":"vulncheck"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-05-07T13:53:58.915297Z","id":"CVE-2026-43579","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-05-07T13:54:07.716Z"}}]}}}