Information Disclosure Vulnerability in OpenClaw Client by OpenClaw

CVE-2026-3691

What is CVE-2026-3691?

The OpenClaw Client is susceptible to an information disclosure vulnerability that occurs during the OAuth authorization process. This flaw allows remote attackers to potentially expose stored credentials by manipulating the authorization URL query string. The attacker requires user interaction to exploit this vulnerability, necessitating that the victim initiate an OAuth authorization flow. If exploited, the vulnerability could lead to a significant compromise of user data and credentials, emphasizing the need for immediate remediation.

References