CVE-2026-108757 Nexting CVE debrief

Who should care

Defenders responsible for OpenClaw agent deployments, especially those using pinclaw version 0.3.0 or earlier, should assess exposure and prioritize remediation. This includes operators, platform administrators, vulnerability management teams, and security teams who need to verify and remediate this vulnerability to prevent potential exploitation. OpenClaw agent deployments using pinclaw version 0.3.0 or earlier are potentially vulnerable and should be rem

Why it matters

CVE-2026-108757 is a missing authentication vulnerability in Nexting pinclaw through 0.3.0. Defenders should prioritize verifying and remediating this vulnerability in their OpenClaw agent deployments.

• Unauthenticated attackers can inject blind prompts into the user's main OpenClaw agent session as user instructions.
• Defenders need to verify and remediate this vulnerability to prevent potential exploitation.
• OpenClaw agent deployments using pinclaw version 0.3.0 or earlier are potentially vulnerable.

Technical summary

The Nexting pinclaw OpenClaw channel plugin through 0.3.0 contains a missing authentication vulnerability in src/core/http-router.ts. Unauthenticated attackers reaching port 18790 can inject blind prompts into the user's main OpenClaw agent session as user instructions. This vulnerability is due to the lack of authentication checks on the POST /pinclaw/send endpoint, allowing attackers to manipulate the OpenClaw agent session. Defenders should prioritize verifying and remediating this vulnerability in their OpenClaw agent deployments, especially those using pinclaw version 0.3.0 or earlier.

Defensive priority

Defenders should prioritize verifying and remediating this vulnerability in their OpenClaw agent deployments, especially those using pinclaw version 0.3.0 or earlier.

Recommended defensive actions

• Verify pinclaw version and upgrade to a fixed version if available
• Restrict access to the OpenClaw agent session
• Monitor OpenClaw agent logs for suspicious activity
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up

Evidence notes

The CVE record and source item provide details on the missing authentication vulnerability in Nexting pinclaw through 0.3.0. The vulnerability allows unauthenticated attackers to inject blind prompts into the user's main OpenClaw agent session as user instructions.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.