CVE-2026-44118 Blast Radius

HIGH • CVSS 7.8OpenClaw before 2026.4.22 derives loopback MCP owner context from spoofable server-issued bearer tokens in request headers. Non-owner loopback clients…

Is Your Infrastructure Using These Packages?

EchelonGraph automatically scans your cloud infrastructure and SBOMs to map your exposure to vulnerabilities like CVE-2026-44118.

Start Free Scan →← Back to CVE-2026-44118