Openclaw cli: OpenClaw: Isolated cron awareness events were recorded as trusted system events (CVE-2026-44999)
Description
OpenClaw CLI versions prior to 2026.4.20 improperly labeled isolated cron awareness events as trusted system events instead of untrusted. This trust-labeling flaw could increase the impact of prompt injections but does not bypass authentication, tool policies, or sandboxing. The issue is fixed in version 2026.4.20 by preserving untrusted labels for these events.
CVSS v4.0
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
In OpenClaw CLI versions before 2026.4.20, output from webhook-triggered isolated cron agent runs was incorrectly queued into the main session awareness stream without the 'trusted: false' flag. Consequently, these events appeared as trusted 'System:' events rather than untrusted system events. This vulnerability is a trust-labeling issue that can amplify prompt-injection effects but does not directly compromise gateway authentication, tool policies, or sandbox environments. The flaw was addressed by ensuring untrusted labels are preserved and correctly forwarded through cron delivery helpers in version 2026.4.20.
Potential Impact
The vulnerability causes isolated cron events to be misclassified as trusted system events, potentially increasing the effectiveness of prompt injection attacks. However, it does not allow bypassing of authentication mechanisms, tool policy enforcement, or sandbox restrictions. The severity is considered low due to the limited scope of impact.
Mitigation Recommendations
A patch is available in OpenClaw CLI version 2026.4.20 that corrects the trust-labeling of isolated cron awareness events. Users should upgrade to this version or later to remediate the issue.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- BREW-openclaw-cli-CVE-2026-44999
- Osv Schema Version
- 1.7.3
- Ecosystems
- ["Homebrew"]
- Cvss Version
- 4.0
Threat ID: 6ac2459012601ec6a31641e2
Added to database: 10/04/2026, 12:24:48 UTC
Last enriched: 10/04/2026, 12:38:57 UTC
Last updated: 10/04/2026, 16:08:38 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.