OpenClaw: Channel setup catalog lookups could include untrusted workspace plugin shadows

HIGH 8.8CVE-2026-43571 · GHSA-82qx-6vj7-p8m2 · Published 05/05/2026 · updated 17/06/2026

In short

CVE-2026-43571 is a HIGH (CVSS 8.8) vulnerability affecting openclaw (openclaw), openclaw.
Chance of exploitation in the next 30 days (EPSS): 0.39%, higher than 32.8% of all vulnerabilities.
Fix: update to 2026.4.10 or later.

Package	Affected versions	Patched versions
openclaw openclaw	`< 2026.4.10`	`2026.4.10`
openclaw npm	`< 2026.4.10`	`2026.4.10`

Description

Summary

Channel setup catalog lookups could include untrusted workspace plugin shadows.

Affected Packages / Versions

Package: openclaw
Ecosystem: npm
Affected versions: < 2026.4.10
Patched versions: >= 2026.4.10

Impact

Channel setup could resolve a workspace plugin shadow before a bundled channel plugin, causing setup-time plugin loading without the intended trust gate.

Technical Details

The fix routes setup catalog lookups through trusted catalog paths and uses excludeWorkspace: true where setup should not include workspace shadows.

Fix

The issue was fixed in the advisory fix branch. The first stable tag containing the fix is v2026.4.10, and [email protected] includes the fix.

Fix Commit(s)

1fede43b948df40ca8674511d4bd08d39f6c5837
PR: private advisory fork

Release Process Note

Users should upgrade to openclaw 2026.4.10 or newer. The latest npm release, 2026.4.14, already includes the fix.

Credits

Thanks to @zsxsoft, with sponsorship from @KeenSecurityLab and @qclawer for reporting this issue.

NVD description

OpenClaw before 2026.4.10 contains a plugin trust bypass vulnerability that allows channel setup catalog lookups to resolve workspace plugin shadows before bundled channel plugins. Attackers can exploit this by crafting malicious workspace plugins that bypass intended trust gates during setup-time plugin loading.

References

openclaw/openclaw security advisory · WEB
nvd.nist.gov/vuln/detail/CVE-2026-43571 · ADVISORY
openclaw/openclaw commit 1fede43 · WEB
openclaw/openclaw · PACKAGE
vulncheck.com/advisories/openclaw-untrusted-workspace-plugin-shadow-resolution-in-channel-setup · WEB

More vulnerabilities in openclaw

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

openclaw

< 2026.4.10

2026.4.10

openclaw

npm

< 2026.4.10

2026.4.10

Description

Summary

Channel setup catalog lookups could include untrusted workspace plugin shadows.

Affected Packages / Versions

Package: openclaw
Ecosystem: npm
Affected versions: < 2026.4.10
Patched versions: >= 2026.4.10

Impact

Channel setup could resolve a workspace plugin shadow before a bundled channel plugin, causing setup-time plugin loading without the intended trust gate.

Technical Details

The fix routes setup catalog lookups through trusted catalog paths and uses excludeWorkspace: true where setup should not include workspace shadows.

Fix

The issue was fixed in the advisory fix branch. The first stable tag containing the fix is v2026.4.10, and [email protected] includes the fix.

Fix Commit(s)

1fede43b948df40ca8674511d4bd08d39f6c5837
PR: private advisory fork

Release Process Note

Users should upgrade to openclaw 2026.4.10 or newer. The latest npm release, 2026.4.14, already includes the fix.

Credits

Thanks to @zsxsoft, with sponsorship from @KeenSecurityLab and @qclawer for reporting this issue.

NVD description

More vulnerabilities in openclaw

See all →