Tag
OpenClaw before version 2026.3.28 contains an agentic consent bypass vulnerability (CVE-2026-41349) that allows LLM agents to silently disable execution approval via the config.patch parameter, potentially enabling remote attackers to bypass security controls and execute unauthorized operations without user consent.