OpenClaw: Gemini OAuth exposed the PKCE verifier through the OAuth state parameter

MEDIUM 5.9CVE-2026-34511 · GHSA-9jpj-g8vv-j5mf · Published 03/04/2026 · updated 24/07/2026

In short

CVE-2026-34511 is a MEDIUM (CVSS 5.9) vulnerability affecting openclaw (openclaw), openclaw.
Chance of exploitation in the next 30 days (EPSS): 0.25%, higher than 16.1% of all vulnerabilities.
Fix: update to 2026.4.2 or later.

Package	Affected versions	Patched versions
openclaw openclaw	`< 2026.4.2`	`2026.4.2`
openclaw npm	`< 2026.4.2`	`2026.4.2`

Description

Summary

Before OpenClaw 2026.4.2, the Gemini OAuth flow reused the PKCE verifier as the OAuth state value. Because the provider reflected state back in the redirect URL, the verifier could be exposed alongside the authorization code.

Impact

Anyone who could capture the redirect URL could learn both the authorization code and the PKCE verifier, defeating PKCE's interception protection for that flow and enabling token redemption.

Affected Packages / Versions

Package: openclaw (npm)
Affected versions: <= 2026.4.1
Patched versions: >= 2026.4.2
Latest published npm version: 2026.4.1

Fix Commit(s)

a26f4d0f3ef0757db6c6c40277cc06a5de76c52f — separate OAuth state from the PKCE verifier

OpenClaw thanks @BG0ECV for reporting.

NVD description

OpenClaw before 2026.4.2 reuses the PKCE verifier as the OAuth state parameter in the Gemini OAuth flow, exposing it through the redirect URL. Attackers who capture the redirect URL can obtain both the authorization code and PKCE verifier, defeating PKCE protection and enabling token redemption.

References

openclaw/openclaw security advisory · WEB
nvd.nist.gov/vuln/detail/CVE-2026-34511 · ADVISORY
openclaw/openclaw commit a26f4d0 · WEB
openclaw/openclaw · PACKAGE
vulncheck.com/advisories/openclaw-pkce-verifier-exposure-via-oauth-state-parameter · WEB

More vulnerabilities in openclaw

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

openclaw

< 2026.4.2

2026.4.2

openclaw

npm

< 2026.4.2

2026.4.2

Description

Summary

Impact

Anyone who could capture the redirect URL could learn both the authorization code and the PKCE verifier, defeating PKCE's interception protection for that flow and enabling token redemption.

Affected Packages / Versions

Package: openclaw (npm)
Affected versions: <= 2026.4.1
Patched versions: >= 2026.4.2
Latest published npm version: 2026.4.1

Fix Commit(s)

a26f4d0f3ef0757db6c6c40277cc06a5de76c52f — separate OAuth state from the PKCE verifier

OpenClaw thanks @BG0ECV for reporting.

NVD description

More vulnerabilities in openclaw

See all →