PT-2026-37024 · Openclaw · Openclaw

Peng Zhou · Published 2026-04-17 · Updated 2026-05-05 · CVE-2026-43569

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.4.9

Description An authentication bypass allows untrusted workspace plugins to be automatically enabled during non-interactive onboarding when provider authentication choices are shadowed. This occurs because the system could select a provider authentication choice shadowed by an untrusted workspace plugin, enabling the plugin during authentication setup without explicit user consent.

Recommendations Update to version 2026.4.9 or newer.

Fix

Weakness Enumeration

CWE-829

Related Identifiers

CVE-2026-43569

GHSA-939R-RJ45-G2RJ

Affected Products

Openclaw

References · 8

• https://github.com/openclaw/openclaw/security/advisories/GHSA-939r-rj45-g2rj · Vendor Advisory
• https://github.com/openclaw/openclaw/commit/2d97eae53e212ae26f3aebcd6a50ffc6877f770d · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-43569 · Security Note
• https://osv.dev/vulnerability/GHSA-939r-rj45-g2rj · Vendor Advisory
• https://github.com/openclaw/openclaw · Note
• https://github.com/openclaw/openclaw/pull/62368 · Note
• https://vulncheck.com/advisories/openclaw-untrusted-provider-plugin-auto-enablement-via-workspace-provider-auth · Note
• https://t.me/CVEtracker/52739 · Telegram Post