Openclaw cli: OpenClaw: Tlon Startup Migration Rehydrates Empty-Array Revocations From File Config (CVE-2026-41388)
Description
A vulnerability in the openclaw CLI (CVE-2026-41388) allows the startup migration process to incorrectly rehydrate revoked Tlon configuration data from file state when empty-array revocations are treated as missing. This issue affects versions prior to 2026.3.31 and has been fixed in version 2026.3.31.
CVSS v4.0
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The openclaw CLI startup migration process in versions <=2026.3.28 treats empty-array revocation settings as if they were missing, which can cause revoked Tlon configuration data to be rehydrated from the file system after a restart. This behavior was corrected in version 2026.3.31 by a fix committed on 2026-03-31. The vulnerability has a low severity rating and does not involve network or user interaction vectors.
Potential Impact
The vulnerability may cause revoked configuration data to be restored unintentionally after a restart, potentially undermining intended revocation controls. The impact is limited to local attack vectors with low severity and no privilege or user interaction required.
Mitigation Recommendations
Upgrade openclaw CLI to version 2026.3.31 or later, where the issue is fixed. No other mitigation is required as the fix is officially released and available.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- BREW-openclaw-cli-CVE-2026-41388
- Osv Schema Version
- 1.7.3
- Ecosystems
- ["Homebrew"]
- Cvss Version
- 4.0
Threat ID: 6ac245d612601ec6a3168090
Added to database: 10/04/2026, 12:25:58 UTC
Last enriched: 10/04/2026, 13:18:52 UTC
Last updated: 10/04/2026, 16:08:38 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.