CVE-2026-30741: Openclaw

Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days.

A remote code execution (RCE) vulnerability in OpenClaw Agent Platform v2026.2.6 allows attackers to execute arbitrary code via a Request-Side prompt injection attack.

Affected products

• Openclaw Openclaw: up to and including 2026.2.6

Published 2026-03-11. Last modified 2026-06-17.