What is the CVSS score of CVE-2026-32897?

CVE-2026-32897 has a CVSS 3.1 base score of 3.7 (Low). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N. EPSS exploitation probability: 0.1%.

Is there a public PoC exploit available for CVE-2026-32897?

Yes, a public proof-of-concept exploit is available for CVE-2026-32897. Prioritise patching immediately. EPSS: 0.1%.

How to fix or mitigate CVE-2026-32897?

During next maintenance window: Apply vendor patches when convenient. Vendor patch is available.

Openclaw CVE-2026-32897

Q: Which versions of Openclaw are affected by CVE-2026-32897?

CVE-2026-32897 is a low-severity vulnerability in OpenClaw versions prior to 2026.2.22 reuse gateway.auth.token as a fallback (CVSS 3.7).. A patch is available.

EUVD-2026-13974 LOW

Key Management Errors (CWE-320)

2026-03-21 VulnCheck

GHSA-8mr2-f9wf-hcfq

Information Disclosure Openclaw

3.7

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

3.7 LOW

AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

Lifecycle Timeline

PoC Detected

Mar 24, 2026 - 21:07 vuln.today

Public exploit code

EUVD ID Assigned

Mar 21, 2026 - 01:00 euvd

EUVD-2026-13974

Analysis Generated

Mar 21, 2026 - 01:00 vuln.today

Patch released

Mar 21, 2026 - 01:00 nvd

Patch available

CVE Published

Mar 21, 2026 - 00:42 nvd

LOW 3.7

DescriptionCVE.org

OpenClaw versions prior to 2026.2.22 reuse gateway.auth.token as a fallback hash secret for owner-ID prompt obfuscation when commands.ownerDisplay is set to hash and commands.ownerDisplaySecret is unset, creating dual-use of authentication secrets across security domains. Attackers with access to system prompts sent to third-party model providers can derive the gateway authentication token from the hash outputs, compromising gateway authentication security.

AnalysisAI

OpenClaw versions prior to 2026.2.22 suffer from cryptographic secret reuse where the gateway authentication token is inappropriately reused as a fallback hashing secret for owner-ID obfuscation in system prompts sent to third-party model providers. An unauthenticated attacker with visibility into system prompts (such as through model provider logs, prompt injection, or interception) can reverse-engineer the gateway authentication token from hash outputs when commands.ownerDisplay is set to hash and commands.ownerDisplaySecret is unset, directly compromising authentication security. The vulnerability has a low CVSS score of 3.7 due to high attack complexity and limited impact scope, but represents a critical cryptographic design flaw that violates separation-of-concerns principles across security domains.

Technical ContextAI

The vulnerability stems from CWE-320 (Key Management Errors), specifically the dual-use of a sensitive authentication credential outside its intended security domain. OpenClaw (identified via CPE cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:*:*:*) implements owner-ID hashing for prompt obfuscation when displaying outputs to third-party large language model providers. When the configuration parameter commands.ownerDisplaySecret is not explicitly set, the system falls back to reusing gateway.auth.token—a credential designed exclusively for gateway authentication—as the HMAC or hash secret. This cross-domain secret reuse violates cryptographic hygiene: authentication secrets should never be repurposed for unrelated cryptographic operations, particularly those involving untrusted third parties. An attacker who observes the hashed owner-ID values in model provider logs or intercepted prompts can perform cryptanalysis or brute-force attacks against the hash function using the known hash output, potentially recovering the plaintext token.

RemediationAI

Upgrade OpenClaw immediately to version 2026.2.22 or later, which removes the insecure fallback behavior and enforces explicit configuration of commands.ownerDisplaySecret. The patch is available via the vendor repository at https://github.com/openclaw/openclaw/commit/c99e7696e6893083b256f0a6c88fb060f3a76fb7. For environments unable to patch immediately, explicitly set commands.ownerDisplaySecret to a cryptographically random value independent of any authentication credentials; do not rely on default or fallback behavior. Additionally, review all gateway.auth.token usage and revoke any tokens that may have been exposed through third-party model provider logs, and enforce TLS encryption with certificate pinning for all communications with external model providers to reduce interception risk.