Skip to main content

Openclaw CVE-2026-28469

HIGH
Authorization Bypass Through User-Controlled Key (CWE-639)
2026-03-05 disclosure@vulncheck.com GHSA-rq6g-px6m-c248
Industrial Openclaw
7.5
CVSS 3.1 · NVD
View

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain

  1. Access
    Send webhook event to shared HTTP path
  2. Exploit
    First-match routing selects wrong account context
  3. Execution
    Process request under incorrect policy allowlist
  4. Impact
    Bypass session verification controls

Vulnerability Assessment

Weakness
CWE
CWE-639
OWASP Top 10:2025
A01:2025 - Broken Access Control
ASVS 5.0
V8 - Authorization Object-level authorization, IDOR prevention
Exploitation Conditions

OpenClaw versions prior to 2026.2.14 with Google Chat monitor component enabled and multiple webhook targets configured on identical HTTP paths in multi-account deployments.
Impact

CVSS 7.5 (HIGH). Attack vector: Network. Complexity: Low. Privileges required: None. User interaction: None.
Exploit ScenarioDerived

An attacker could exploit this vulnerability to compromise the affected system.
This Week Schedule remediation this week. Why: HIGH severity (CVSS 7.0-8.9).
Patch available 0.0% exploitation probability (EPSS)

Get an e-mail when this CVE is exploited, patched or re-scored. Free account.

Alert me

AnalysisAIv1 – Mar 12, 2026

Openclaw versions up to 2026.2.14 is affected by authorization bypass through user-controlled key (CVSS 7.5).

RemediationAI

A vendor patch is available — apply it immediately. Restrict network access to the affected service where possible.

Affected Packages

npm clawdbot no fix
npm openclaw fix: 2026.2.14

Source: OSV (Open Source Vulnerabilities)

Affects your stack

Affects 2 packages in npm

Checking this CVE against your own stacks and servers is part of the Basic plan and up.

Sign in to check
Technical ContextAI · show details

This vulnerability (CWE-639: Authorization Bypass Through User-Controlled Key) exists in the Google Chat monitor component. OpenClaw versions prior to 2026.2.14 contain a webhook routing vulnerability in the Google Chat monitor component that allows cross-account policy context misrouting when multiple webhook targets share the same HTTP path. Attackers can exploit first-match request verification semantics to process inbound webhook events under incorrect account contexts, bypassing intended allowlists and session policies.

Know when Openclaw gets its next vulnerability

  • Watch products and get an email when something new is published
  • Check this CVE against your own stack and servers
  • Exploit and PoC references, threat intelligence from 22 sources
Continue with Google Continue with GitHub

No credit card · 7-day full trial

Severity by source

NVD PRIMARY 7.5 HIGH
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
High
Availability
None

Lifecycle Timeline

2
Patch released
Mar 09, 2026 - 20:29 nvd
Patch available
CVE Published
Mar 05, 2026 - 22:16 nvd
HIGH 7.5

DescriptionCVE.org

OpenClaw versions prior to 2026.2.14 contain a webhook routing vulnerability in the Google Chat monitor component that allows cross-account policy context misrouting when multiple webhook targets share the same HTTP path. Attackers can exploit first-match request verification semantics to process inbound webhook events under incorrect account contexts, bypassing intended allowlists and session policies.

Executive ViewAI

Why It Matters

Openclaw versions through 2026.2.14 contain an authorization bypass vulnerability that could allow attackers to access resources or functionality they are not entitled to. This affects any organization running vulnerable Openclaw instances and requires immediate patching to prevent unauthorized access to sensitive data or system compromise.

Business Impact: High
Compensating Controls

Apply vendor patch.

Threat Intelligence Overview

EPSS Score
0.0%
Top 89% exploitable
Data Quality
4 sources
Confidence: Medium
NVD CVE.org EPSS GitHub

How this decision was reached

The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.

SignalValue
Severity HIGH
CISA KEV No
Public POC No
EPSS 0.0%
Patch available Yes
Active threat No
Deciding rule
HIGH severity (CVSS 7.0-8.9)
What every action level means
Emergency Immediate action required. Criteria: CRITICAL + in CISA KEV (actively exploited) without patch, OR CRITICAL + EPSS > 30% without patch, OR CRITICAL + active threat signals without patch.
Act Now Prioritize within 24-48h. Criteria: in KEV with patch available, OR CRITICAL + public POC, OR HIGH + EPSS > 10%, OR CRITICAL + active threat, OR any CRITICAL severity.
This Week Schedule remediation this week. Criteria: HIGH severity (CVSS 7.0-8.9). Patch within normal change window.
This Month Plan within 30 days. Criteria: MEDIUM severity (CVSS 4.0-6.9), lower exploitation probability. Include in regular patch cycle.
Monitor Track and reassess. Criteria: LOW severity (CVSS 0.1-3.9), minimal exploitation risk. No immediate action needed.

SSVC AssessmentENISA

SSVC Decision· derived
Scheduled
Exploitation· derived
None
System Exposure· derived
Open
Automatable· derived
Yes
Human Impact
High

Priority Score

38
Low Medium High Critical
KEV: 0
EPSS: 0
CVSS: +38
PoC: 0
Weaponized: 0
Threat intel: 0
Gov advisory: 0

Affected Products (CPE)CVE.org

cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*

Related Vulnerabilities in OpenClaw Multiple Security Vulnerabilities

View all 46
CVE-2026-29613 MEDIUM
5.9
CVE-2026-29609 HIGH
7.5
CVE-2026-28479 HIGH
7.5
CVE-2026-28475 MEDIUM
4.8
CVE-2026-28458 HIGH
8.1
CVE-2026-28457 MEDIUM
6.1
CVE-2026-28453 HIGH
7.5
CVE-2026-28446 CRITICAL POC
9.4
CVE-2026-28456 HIGH
7.2
CVE-2026-28468 HIGH
7.7
CVE-2026-28394 MEDIUM
6.5
CVE-2026-28452 MEDIUM
5.5
CVE-2026-28450 MEDIUM
6.8
CVE-2026-28481 MEDIUM
6.5
CVE-2026-28467 MEDIUM POC
6.5
CVE-2026-29606 MEDIUM
6.5
CVE-2026-28474 CRITICAL
9.3
CVE-2026-28465 HIGH
8.2
CVE-2026-28459 HIGH
7.1
CVE-2026-28462 HIGH
7.5
CVE-2026-28472 HIGH
8.1
CVE-2026-29611 HIGH
7.5
CVE-2026-28393 HIGH
7.7
CVE-2026-28451 HIGH
8.3
CVE-2026-28477 HIGH
7.1
CVE-2026-28395 MEDIUM
6.3
CVE-2026-28480 MEDIUM POC
6.5
CVE-2026-28391 CRITICAL
9.8
CVE-2026-28392 HIGH
7.5
CVE-2026-28447 HIGH
8.1
CVE-2026-28448 HIGH POC
7.3
CVE-2026-28454 HIGH
7.5
CVE-2026-28463 HIGH
8.6
CVE-2026-28464 MEDIUM
5.9
CVE-2026-28466 CRITICAL
9.9
CVE-2026-28470 CRITICAL
9.2
CVE-2026-28471 MEDIUM
5.3
CVE-2026-28473 HIGH
8.1
CVE-2026-28476 MEDIUM
6.3
CVE-2026-28478 HIGH
7.5
CVE-2026-28482 HIGH
7.1
CVE-2026-28485 HIGH
8.4
CVE-2026-28486 MEDIUM
6.1
CVE-2026-29610 HIGH
8.8
CVE-2026-29612 MEDIUM
5.5

More in Openclaw

View all
CVE-2026-33579 CRITICAL POC
9.4 Mar 31

Privilege escalation in OpenClaw (pre-2026.3.28) allows unauthenticated remote attackers to gain administrative access b
CVE-2026-32042 HIGH POC
8.8 Mar 21

OpenClaw versions 2026.2.22 through 2026.2.24 contain a privilege escalation vulnerability that allows authenticated att
CVE-2026-32051 HIGH POC
8.8 Mar 21

An authorization mismatch vulnerability in OpenClaw versions prior to 2026.3.1 allows authenticated users with operator.
CVE-2026-25253 HIGH POC
8.8 Feb 01

OpenClaw versions prior to 2026.1.29 automatically establish WebSocket connections to attacker-controlled gateway URLs e
CVE-2026-32846 HIGH POC
8.7 Mar 26

Path traversal in OpenClaw through version 2026.3.23 enables unauthenticated remote attackers to read arbitrary files in
CVE-2026-53857 HIGH POC
8.6 Jun 16

Authentication bypass in OpenClaw before 2026.5.3 allows remote attackers with low privileges to receive agent responses
CVE-2026-100530 HIGH POC
8.5 Sep 26

Directory-context bypass in OpenClaw before 2026.8.1 allows authenticated attackers with user interaction to reuse an 'a
CVE-2026-32064 HIGH POC
8.5 Mar 21

Unauthenticated access to the noVNC observer interface in OpenClaw's Docker sandbox browser allows anyone who can reach

CVE-2026-32055 HIGH POC
7.6 Mar 21

OpenClaw versions before 2026.2.26 allow authenticated attackers to write arbitrary files outside the workspace director
CVE-2026-32056 HIGH POC
7.5 Mar 21

OpenClaw versions prior to 2026.2.22 contain a shell environment variable injection vulnerability in the system.run func
CVE-2026-32049 HIGH POC
7.5 Mar 21

OpenClaw versions prior to 2026.2.22 contain a resource exhaustion vulnerability where the application fails to consiste

Same weakness CWE-639 – Authorization Bypass Through User-Controlled Key

View all
CVE-2024-50483 CRITICAL
9.8
CVE-2026-55255 HIGH POC
8.4
CVE-2025-3605 CRITICAL POC
9.8
CVE-2022-3805 HIGH POC
8.6
CVE-2025-5947 CRITICAL POC
9.8
CVE-2025-67165 CRITICAL POC
9.8
CVE-2026-18315 CRITICAL POC
9.8
CVE-2020-36923 CRITICAL POC
9.8

References

Advisories & patches
PATCH https://github.com/openclaw/openclaw/commit/61d59a802869177d9cef52204767cd83357ab79e ADVISORY https://github.com/openclaw/openclaw/security/advisories/GHSA-rq6g-px6m-c248 REF https://www.vulncheck.com/advisories/openclaw-cross-account-policy-context-misrouting-via-shared-webhook-path-ambiguity

Search Externally

GitHub PoC Exploit-DB PacketStorm Snyk Rapid7 Nuclei Templates Trickest PoC
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy