| Package | Affected versions | Patched versions |
|---|---|---|
| openclaw | < 2026.4.20 | 2026.4.20 |
| openclaw | < 2026.4.20 | 2026.4.20 |
openclaw (npm)< 2026.4.202026.4.20The Control UI assistant-media route authenticated trusted-proxy callers but did not enforce the declared operator scopes for identity-bearing HTTP auth paths. A trusted-proxy caller without operator.read could access assistant-media files and metadata that were otherwise inside allowed media roots.
The route still required successful gateway authentication and media-root checks. Severity is low.
Assistant-media file and metadata requests now require operator.read on identity-bearing HTTP auth paths.
Fix commit:
99ef3a63c58440d53f8e45ad861b846032fcb036Fixed in OpenClaw 2026.4.20.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free