A vulnerability categorized as problematic has been discovered in OpenClaw up to 2026.2.13. This affects an unknown part of the component OAuth Call Handler. Such manipulation leads to cross-site request forgery.
This vulnerability is documented as CVE-2026-28477. The attack can be executed remotely. There is not any exploit available.
It is advisable to upgrade the affected component.
