Cve-2026-43571

OpenClaw before 2026.4.10 is vulnerable to a plugin trust bypass, allowing attackers to craft malicious workspace plugins that bypass intended trust gates during setup-time plugin loading.