CVE-2026-32045

CVE-2026-32045 is a critical authentication bypass vulnerability affecting OpenClaw versions prior to 2026.2.21, where tokenless Tailscale header authentication is incorrectly applied to HTTP gateway routes. This misconfiguration allows attackers on trusted networks to bypass token and password requirements, gaining unauthorized access to these routes. Rated 9.1 CRITICAL on the CVSS scale, this vulnerability is easily exploitable over the network with low attack complexity and no user interaction or privileges required, potentially leading to high confidentiality and integrity impacts. There is currently no evidence of active exploitation, nor publicly available exploit code, and it has received minimal community discussion or media coverage.