Which versions of Openclaw are affected by CVE-2026-32896?

Organizations using OpenClaw versions prior to 2026.2.21 BlueBubbles webhook handler should be aware of moderate risk from CVE-2026-32896, a missing authentication vulnerability rated CVSS 4.8.. A patch is available.

Is there a public PoC exploit available for CVE-2026-32896?

Yes, a public proof-of-concept exploit is available for CVE-2026-32896. Prioritise patching immediately. EPSS: 0.1%.

How to fix or mitigate CVE-2026-32896?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Audit authentication configurations.

Openclaw CVE-2026-32896

Q: What is the CVSS score of CVE-2026-32896?

CVE-2026-32896 has a CVSS 4.0 base score of 6.3 (Medium). CVSS vector: CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.1%.

EUVD-2026-13972 MEDIUM

Missing Authentication for Critical Function (CWE-306)

2026-03-21 VulnCheck

GHSA-vh4c-j2xv-9pv9

Authentication Bypass Openclaw

6.3

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

6.3 MEDIUM

CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

CVSS changed

May 26, 2026 - 14:22 NVD

4.8 (MEDIUM) 6.3 (MEDIUM)

PoC Detected

Mar 23, 2026 - 19:45 vuln.today

Public exploit code

EUVD ID Assigned

Mar 21, 2026 - 01:00 euvd

EUVD-2026-13972

Analysis Generated

Mar 21, 2026 - 01:00 vuln.today

Patch released

Mar 21, 2026 - 01:00 nvd

Patch available

CVE Published

Mar 21, 2026 - 00:42 nvd

MEDIUM 4.8

DescriptionCVE.org

OpenClaw versions prior to 2026.2.21 BlueBubbles webhook handler contains a passwordless fallback authentication path that allows unauthenticated webhook events in certain reverse-proxy or local routing configurations. Attackers can bypass webhook authentication by exploiting the loopback/proxy heuristics to send unauthenticated webhook events to the BlueBubbles plugin.

AnalysisAI

OpenClaw versions prior to 2026.2.21 contain a passwordless fallback authentication bypass in the BlueBubbles webhook handler that allows attackers to send unauthenticated webhook events by exploiting loopback or reverse-proxy heuristics. The vulnerability affects the BlueBubbles plugin component and has a CVSS score of 4.8 (medium severity) with low attack complexity, enabling both confidentiality and integrity impact without requiring authentication or user interaction. A vendor patch is available, and the vulnerability is documented in public advisories from VulnCheck and GitHub Security.

Technical ContextAI

The vulnerability resides in the BlueBubbles webhook handler within OpenClaw (CPE: cpe:2.3:a:openclaw:openclaw), which implements authentication verification for incoming webhook events. The root cause is classified under CWE-306 (Missing Authentication for Critical Function), stemming from improper implementation of webhook authentication logic. Specifically, the handler contains a passwordless fallback authentication path that is intended to accommodate certain network configurations involving reverse proxies or local routing scenarios. However, this fallback mechanism uses heuristics based on request origin (loopback detection or proxy-origin analysis) to determine trustworthiness, which can be manipulated by attackers who understand the routing topology. When requests appear to originate from trusted internal sources, the authentication check is bypassed entirely, allowing arbitrary webhook payload delivery without credentials.

RemediationAI

Upgrade OpenClaw to version 2026.2.21 or later to obtain the vendor patch. Two specific patch commits (6b2f2811dc623e5faaf2f76afaa9279637174590 and 283029bdea23164ab7482b320cb420d1b90df806) are available in the OpenClaw GitHub repository. As an interim mitigation before patching, restrict webhook event reception to explicitly trusted IP ranges (whitelist only known webhook senders), enforce mutual TLS (mTLS) for reverse-proxy-to-application communication to prevent origin spoofing, disable any fallback authentication modes if exposed via configuration, and audit reverse-proxy configurations to ensure proper authentication header forwarding. Consult the GitHub Security Advisory (GHSA-5mx2-2mgw-x8rm) for environment-specific guidance, particularly if using custom reverse-proxy setups.