Improper Restriction of Excessive Authentication Attempts in OpenClaw - #VU125215
Published: April 8, 2026
Vulnerability identifier: #VU125215
CSH Severity: Medium
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: N/A
CWE-ID: CWE-307
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to guess weak webhook tokens.
The vulnerability exists due to improper restriction of excessive authentication attempts in the Synology Chat webhook authentication mechanism when handling repeated invalid token submissions. A remote attacker can send repeated token guesses to guess weak webhook tokens.
Affected software
OpenClaw
Remediation
Install security update from vendor's website.