What is CVE-2026-66420?

CVE-2026-66420 is a high-severity vulnerability in Tugcantopaloglu Openclaw-dashboard, classified under Origin Validation Error. CVSS score: 8.8/10. Published 2026-07-30.

How severe is CVE-2026-66420?

High severity. CVSS v3 base score is 8.8 out of 10.

Vulnerability in Tugcantopaloglu Openclaw-dashboard

CVE-2026-66420

MeshCentral 1.1.21 contains a cross-site WebSocket hijacking protection bypass vulnerability that allows unauthenticated remote attackers to hijack authenticated administrator sessions by exploiting an unconditional early return in the Che…

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.

Affected products

Tugcantopaloglu Openclaw-dashboard — versions 1.1.21

Weakness classification (CWE)

CWE-346 — Origin Validation Error

References

disclosure@vulncheck.com (product)
disclosure@vulncheck.com (patch)
disclosure@vulncheck.com (product)
disclosure@vulncheck.com (third-party-advisory)

Frequently asked questions

What is CVE-2026-66420?: CVE-2026-66420 is a high-severity vulnerability in Tugcantopaloglu Openclaw-dashboard, classified under Origin Validation Error. CVSS score: 8.8/10. Published 2026-07-30.
How severe is CVE-2026-66420?: High severity. CVSS v3 base score is 8.8 out of 10.