CVE-2026-27003 | OpenClaw/Clawdbot/Moltbot up to 2026.2.14 Telegram Bot Tokens insufficiently protected credentials

A vulnerability classified as problematic has been found in OpenClaw, Clawdbot and Moltbot up to 2026.2.14. Affected by this vulnerability is an unknown functionality of the component Telegram Bot Tokens Handler. This manipulation causes insufficiently protected credentials.

This vulnerability is tracked as CVE-2026-27003. The attack is restricted to local execution. No exploit exists.

It is recommended to upgrade the affected component.