Lintsinghua

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.3.22 Description When the `trustedProxies` setting is configured, the software incorrectly processes the X-Forwarded-For header, potentially allowing attackers to spoof loopback hops. This can bypass authentication and rate-limiting protections by presenting forged headers, effectively masquerading as a loopback client. Recommendations Update to version 2026.3.22 or later.

**Name of the Vulnerable Software and Affected Versions** OpenClaw versions prior to 2026.3.13 **Description** A remote command injection issue exists in the iMessage attachment staging flow. The problem occurs when remote attachment staging is enabled and the software processes remote attachment paths containing shell metacharacters. These unsanitized paths are passed directly to the SCP remote operand without validation, allowing an attacker to execute arbitrary commands on configured remote hosts. The vulnerability is located in the `src/auto-reply/reply/stage-sandbox-media.ts` file, specifically when the `ctx.MediaRemoteHost` variable is set and the system spawns `/usr/bin/scp` using the format `<remoteHost>:<remotePath>`. **Recommendations** Update to version 2026.3.13 or later. As a temporary mitigation, disable remote attachment staging to prevent the execution of commands via the affected flow.

**Name of the Vulnerable Software and Affected Versions** OpenClaw versions prior to 2026.3.12 **Description** OpenClaw is susceptible to an authentication bypass issue in Feishu webhook mode. This occurs when only the `verificationToken` is configured, and the `encryptKey` is not. This allows unauthenticated attackers to inject forged Feishu events and potentially trigger the execution of downstream tools by reaching the webhook endpoint. The issue allows acceptance of forged events. **Recommendations** Versions prior to 2026.3.12 should be updated to version 2026.3.12 or later.

**Name of the Vulnerable Software and Affected Versions** OpenClaw versions prior to 2026.3.12 **Description** The software embeds long-lived shared gateway credentials directly within pairing setup codes. These codes are generated by the `/pair` API endpoint and the `OpenClaw qr` command. If setup codes are leaked through chat history, logs, or screenshots, attackers can recover and reuse the credentials outside the intended one-time pairing process. **Recommendations** Update to version 2026.3.12 or later.

**Name of the Vulnerable Software and Affected Versions** OpenClaw versions prior to 2026.3.12 **Description** OpenClaw automatically discovers and loads plugins from the `.OpenClaw/extensions/` directory without explicit trust verification. This allows for arbitrary code execution, as attackers can include crafted workspace plugins in cloned repositories. When a user runs OpenClaw from such a directory, the malicious code is executed under the user's account. This issue occurs because the application fails to verify the integrity of plugins loaded from the specified path. **Recommendations** Update to version 2026.3.12 or later. Avoid running OpenClaw inside untrusted repositories on versions prior to 2026.3.12.