CVE-2026-44112: OpenClaw "Claw Chain": Four CVEs Enable Data Theft, Privilege Escalation, and Persistence
CVE-2026-44112 is a high-severity privilege escalation issue in OpenClaw, an AI agent. Affected: OpenClaw < 2026.4.22.
Is OpenClaw running on your developers' machines? Anomity finds every device with this AI agent installed, shows the version, and can block it by policy. Detect this across your developers' devices with Anomity →
Key facts
- ID
CVE-2026-44112- Severity
- high
- Attack type
- Privilege escalation
- Component
- OpenClaw · AI agent
- Known exploited
- No known exploitation
- Published
- Last verified
What is CVE-2026-44112?
Four chained vulnerabilities (CVE-2026-44112, 44113, 44115, 44118) in OpenClaw allow an attacker with minimal foothold to escalate privileges, expose sensitive operator data, and plant backdoors that survive restarts, collectively dubbed Claw Chain. With OpenClaw's install base concentrated in CI/CD runners that often hold long-lived cloud credentials, a single compromised instance can pivot into production. Patched in OpenClaw 2026.4.22.
Affected versions
| Affected | Fixed in |
|---|---|
OpenClaw < 2026.4.22 | No fixed version listed |
Am I affected by CVE-2026-44112?
You are affected if you run OpenClaw < 2026.4.22.
How do I fix CVE-2026-44112?
Upgrade to OpenClaw 2026.4.22+. Audit OpenClaw runner logs for unexpected operator role changes since April. Rotate any cloud credentials accessible from OpenClaw instances. Restrict OpenClaw network egress.
How do I find every machine running OpenClaw?
Anomity inventories the AI agents, MCP servers, IDE extensions and skills on each developer device, so you can see which machines run OpenClaw and which version, then enforce a policy on it.