Aether Ai

**Name of the Vulnerable Software and Affected Versions** OpenClaw versions prior to 2026.2.17 **Description** OpenClaw versions prior to 2026.2.17 contain a path traversal flaw in the `$include` directive resolution. This allows reading arbitrary local files outside the configuration directory boundary. An attacker with the ability to modify OpenClaw configuration files can exploit this by specifying absolute paths, traversal sequences, or symbolic links to access sensitive files readable by the OpenClaw process user, including API keys and credentials. The impact is limited by the file permissions of the OpenClaw runtime user. The vulnerability exists due to improper handling of the `$include` directive. **Recommendations** Update OpenClaw to version 2026.2.17 or later.

**Name of the Vulnerable Software and Affected Versions** OpenClaw versions prior to 2026.2.22 **Description** The software reuses the `gateway.auth.token` as a fallback hash secret for owner-ID prompt obfuscation when `commands.ownerDisplay` is set to hash and `commands.ownerDisplaySecret` is unset. This creates a dual-use of authentication secrets across security domains. An attacker with access to system prompts sent to third-party model providers can derive the gateway authentication token from the hash outputs, potentially compromising gateway authentication security. **Recommendations** Update to version 2026.2.22 or later.

**Name of the Vulnerable Software and Affected Versions** OpenClaw versions prior to 2026.2.14 **Description** The manual Chutes OAuth login flow in OpenClaw is susceptible to a bypass of OAuth CSRF state validation. This allows an attacker to bypass CSRF protection by convincing a user to paste attacker-controlled OAuth callback data, potentially leading to credential substitution and the persistence of tokens for unauthorized accounts. The automatic local callback flow is not affected. **Recommendations** Update to version 2026.2.14 or later.