EUVD-2026-30419
GHSA-23m9-rr4p-xpwh
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary rating from Vendor (VulnCheck) · only source for this CVE.
CVSS VectorVendor: VulnCheck
Lifecycle Timeline
6DescriptionCVE.org
Crabbox prior to v0.12.0 contains a privilege escalation vulnerability that allows users with shared visibility-only access to obtain Code, WebVNC, and Egress agent tickets by sending POST requests to ticket endpoints. Attackers can exploit insufficient access control checks on the /v1/leases/:id/code/ticket, /v1/leases/:id/webvnc/ticket, and /v1/leases/:id/egress/ticket endpoints to obtain bridge-agent tickets and impersonate trusted lease-side bridges despite having only visibility permissions.
AnalysisAI
Privilege escalation in Crabbox versions prior to v0.12.0 allows authenticated users with visibility-only permissions to escalate privileges and obtain code execution, remote desktop access, and data exfiltration capabilities. By directly invoking three unprotected ticket-generation endpoints (/v1/leases/:id/code/ticket, /v1/leases/:id/webvnc/ticket, /v1/leases/:id/egress/ticket), attackers can obtain bridge-agent credentials and impersonate trusted lease-side bridges, bypassing intended read-only access restrictions. The vulnerability was patched in v0.12.0 (commit 95cb30dc) following VulnCheck disclosure. CVSS 8.6 (High) reflects network-accessible exploitation requiring only low-privilege authentication with low attack complexity. No active exploitation (CISA KEV) or public exploit code identified at time of analysis, though the attack is straightforward for authenticated insiders.
Technical ContextAI
Crabbox is an infrastructure management platform (openclaw/crabbox) that orchestrates ephemeral compute leases across cloud providers with role-based visibility controls. The vulnerability stems from CWE-639 (Authorization Bypass Through User-Controlled Key), where the application fails to validate whether the authenticated user's permission level (visibility-only vs. full control) authorizes privileged operations before issuing bridge-agent tickets. The affected endpoints generate time-limited JWT or session tokens for three critical lease-side services: Code (remote code execution/shell access), WebVNC (remote desktop/graphical access), and Egress (data exfiltration/network bridge). According to CPE cpe:2.3:a:openclaw:crabbox:*:*:*:*:*:*:*:*, all versions before v0.12.0 are vulnerable. The CVSS vector (AV:N/AC:L/PR:L) indicates the endpoints are remotely accessible via network APIs with no additional complexity barriers once a low-privilege user authenticates. The attack surface exists wherever Crabbox deployments implement shared visibility permissions, a common pattern in multi-tenant or team-based infrastructure-as-code workflows.
RemediationAI
Upgrade immediately to Crabbox v0.12.0 or later from https://github.com/openclaw/crabbox/releases/tag/v0.12.0, which contains the authorization fix in commit 95cb30dc7dbaa1fef690a42ef6ac1cb6e307a191 per pull request https://github.com/openclaw/crabbox/pull/71. For environments unable to upgrade immediately, implement network-level access controls to restrict API endpoint access (/v1/leases/:id/code/ticket, /v1/leases/:id/webvnc/ticket, /v1/leases/:id/egress/ticket) to only fully-privileged users through reverse proxy rules or API gateway policies, though this workaround does not address the underlying authorization flaw and may break legitimate visibility-only workflows. Audit existing lease access logs for POST requests to the three ticket endpoints from users with visibility-only permissions to detect potential historical exploitation. Review and rotate any bridge-agent credentials or session tokens that may have been obtained by unauthorized users. No configuration-only mitigation fully resolves the vulnerability; code upgrade is required for complete remediation.
Auth bypass in OpenClaw voice-call extension before 2026.2.1. EPSS 0.68%. PoC and patch available.
Privilege escalation in OpenClaw (pre-2026.3.28) allows unauthenticated remote attackers to gain administrative access b
OpenClaw versions 2026.2.22 through 2026.2.24 contain a privilege escalation vulnerability that allows authenticated att
An authorization mismatch vulnerability in OpenClaw versions prior to 2026.3.1 allows authenticated users with operator.
OpenClaw versions prior to 2026.1.29 automatically establish WebSocket connections to attacker-controlled gateway URLs e
Path traversal in OpenClaw through version 2026.3.23 enables unauthenticated remote attackers to read arbitrary files in
OpenClaw sandbox browser functionality launches x11vnc for noVNC observer sessions without requiring authentication, all
OpenClaw versions before 2026.2.26 allow authenticated attackers to write arbitrary files outside the workspace director
OpenClaw versions prior to 2026.2.22 contain a shell environment variable injection vulnerability in the system.run func
OpenClaw versions prior to 2026.2.22 contain a resource exhaustion vulnerability where the application fails to consiste
OpenClaw versions prior to 2026.3.1 contain a sandbox escape vulnerability that allows authenticated attackers with low
OpenClaw versions 2026.1.30 and below fail to validate Telegram webhook secret tokens when `channels.telegram.webhookSec
Same technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today