EUVD-2026-13972
GHSA-vh4c-j2xv-9pv9
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A07:2025 - Authentication Failures
ASVS 5.0
V6 - Authentication Authentication required for critical functions
MITRE ATT&CK
1 technique across 1 tactic: Initial Access The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Impact | The CVSS 3.1 vector (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N) indicates network-exploitable attack with high attack complexity, requiring deep knowledge of the target's reverse-proxy or routing configuration to succeed. The medium severity score (4.8) reflects limited impact (only confidentiality and integrity, no availability) and high barrier to exploitation. The high attack complexity (AC:H) is the critical mitigating factor—the attacker must either be on the local network or understand and exploit specific proxy configurations, making opportunistic mass exploitation unlikely. Without disclosed EPSS score or active KEV status in public data, and given the requirement for environmental knowledge and network position, this threat is primarily relevant to deployments with misconfigured reverse proxies or organizations where network access is less controlled. Organizations using standard configurations and proper reverse-proxy authentication forwarding face minimal practical risk despite the medium CVSS score. |
| Exploit ScenarioDerived | An attacker positioned on the same network as an OpenClaw deployment, or who has mapped the reverse-proxy configuration, crafts a webhook request with a spoofed origin header (e.g., 127.0.0.1 or an internal proxy IP) that bypasses the loopback heuristic in the BlueBubbles handler. The attacker sends an unauthenticated webhook payload containing malicious data to trigger unintended state changes or extract sensitive information from the BlueBubbles plugin. Success depends on the attacker's ability to determine the exact proxy heuristic used (AC:H), making this a targeted attack rather than a widespread exploitation scenario. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Mar 21, 2026
OpenClaw versions prior to 2026.2.21 contain a passwordless fallback authentication bypass in the BlueBubbles webhook handler that allows attackers to send unauthenticated webhook events by exploiting loopback or reverse-proxy heuristics. The vulnerability affects the BlueBubbles plugin component and has a CVSS score of 4.8 (medium severity) with low attack complexity, enabling both confidentiality and integrity impact without requiring authentication or user interaction. A vendor patch is available, and the vulnerability is documented in public advisories from VulnCheck and GitHub Security.
RemediationAI
Upgrade OpenClaw to version 2026.2.21 or later to obtain the vendor patch. Two specific patch commits (6b2f2811dc623e5faaf2f76afaa9279637174590 and 283029bdea23164ab7482b320cb420d1b90df806) are available in the OpenClaw GitHub repository. As an interim mitigation before patching, restrict webhook event reception to explicitly trusted IP ranges (whitelist only known webhook senders), enforce mutual TLS (mTLS) for reverse-proxy-to-application communication to prevent origin spoofing, disable any fallback authentication modes if exposed via configuration, and audit reverse-proxy configurations to ensure proper authentication header forwarding. Consult the GitHub Security Advisory (GHSA-5mx2-2mgw-x8rm) for environment-specific guidance, particularly if using custom reverse-proxy setups.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in npm
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
The vulnerability resides in the BlueBubbles webhook handler within OpenClaw (CPE: cpe:2.3:a:openclaw:openclaw), which implements authentication verification for incoming webhook events. The root cause is classified under CWE-306 (Missing Authentication for Critical Function), stemming from improper implementation of webhook authentication logic. Specifically, the handler contains a passwordless fallback authentication path that is intended to accommodate certain network configurations involving reverse proxies or local routing scenarios. However, this fallback mechanism uses heuristics based on request origin (loopback detection or proxy-origin analysis) to determine trustworthiness, which can be manipulated by attackers who understand the routing topology. When requests appear to originate from trusted internal sources, the authentication check is bypassed entirely, allowing arbitrary webhook payload delivery without credentials.
Know when Openclaw gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
Primary rating from Vendor (VulnCheck) · only source for this CVE.
CVSS VectorVendor: VulnCheck
Lifecycle Timeline
4DescriptionCVE.org
OpenClaw versions prior to 2026.2.21 BlueBubbles webhook handler contains a passwordless fallback authentication path that allows unauthenticated webhook events in certain reverse-proxy or local routing configurations. Attackers can bypass webhook authentication by exploiting the loopback/proxy heuristics to send unauthenticated webhook events to the BlueBubbles plugin.
Executive ViewAI
Organizations using OpenClaw versions prior to 2026.2.21 BlueBubbles webhook handler should be aware of moderate risk from CVE-2026-32896, a missing authentication vulnerability rated CVSS 4.8. This could allow unauthorized access to protected resources. Proof-of-concept code is publicly available. A patch is available and should be applied during regular vulnerability management.
Apply vendor patch. If patching is delayed: restrict network access, enable MFA, monitor auth logs.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Authentication bypass attacks exploit flaws in the verification mechanisms that control access to systems and applications.
Related Vulnerabilities in OpenClaw Multiple Authorization and Command Execution
View all 20Auth bypass in OpenClaw voice-call extension before 2026.2.1. EPSS 0.68%. PoC and patch available.
Privilege escalation in OpenClaw (pre-2026.3.28) allows unauthenticated remote attackers to gain administrative access b
OpenClaw versions 2026.2.22 through 2026.2.24 contain a privilege escalation vulnerability that allows authenticated att
OpenClaw versions prior to 2026.1.29 automatically establish WebSocket connections to attacker-controlled gateway URLs e
Path traversal in OpenClaw through version 2026.3.23 enables unauthenticated remote attackers to read arbitrary files in
Authentication bypass in OpenClaw before 2026.5.3 allows remote attackers with low privileges to receive agent responses
Directory-context bypass in OpenClaw before 2026.8.1 allows authenticated attackers with user interaction to reuse an 'a
Exploit-DB