THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-32896 (MEDIUM 4.8) — The BlueBubbles webhook handler in OpenClaw versions prior to 2026.2.21 contains a passwordless fallback authentication path that allows unauthenticated webhook events in certain reverse-proxy or local routing configurations. Attackers can bypass webhook authentication by exploit

[NVD] CVE-2026-32896 (MEDIUM 4.8) — The BlueBubbles webhook handler in OpenClaw versions prior to 2026.2.21 contains a passwordless fallback authentication path that allows unauthenticated webhook events in certain reverse-proxy or local routing configurations. Attackers can bypass webhook authentication by exploit

lownvdPublished 2026-03-21

CVE-2026-32896 CVSS: 4.8 MEDIUM Published: 2026-03-21T01:17:10.510

The BlueBubbles webhook handler in OpenClaw versions prior to 2026.2.21 contains a passwordless fallback authentication path that allows unauthenticated webhook events in certain reverse-proxy or local routing configurations. Attackers can bypass webhook authentication by exploiting the loopback/proxy heuristics to send unauthenti

Indicators of compromise

CVE-2026-32896cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-32896