OpenClaw: Assistant media route missed scope enforcement for trusted-proxy authorization

中 6.5CVE-2026-41908 · GHSA-v8qf-fr4g-28p2 · 23/04/2026 公開 · 17/06/2026 更新

要点

CVE-2026-41908 は openclaw (openclaw), openclaw に影響する深刻度「中」 (CVSS 6.5) の脆弱性です。
今後30日間に悪用される確率（EPSS）：0.22%（全脆弱性の 12.9% より高い）。
対処：2026.4.20 以降に更新してください。

パッケージ	影響を受けるバージョン	修正済みバージョン
openclaw openclaw	`< 2026.4.20`	`2026.4.20`
openclaw npm	`< 2026.4.20`	`2026.4.20`

概要

Affected Packages / Versions

Package: openclaw (npm)
Affected versions: < 2026.4.20
Patched version: 2026.4.20

Impact

The Control UI assistant-media route authenticated trusted-proxy callers but did not enforce the declared operator scopes for identity-bearing HTTP auth paths. A trusted-proxy caller without operator.read could access assistant-media files and metadata that were otherwise inside allowed media roots.

The route still required successful gateway authentication and media-root checks. Severity is low.

Fix

Assistant-media file and metadata requests now require operator.read on identity-bearing HTTP auth paths.

Fix commit:

99ef3a63c58440d53f8e45ad861b846032fcb036

Release

Fixed in OpenClaw 2026.4.20.

NVD の説明

OpenClaw before 2026.4.20 contains a scope enforcement bypass vulnerability in the assistant-media route that allows trusted-proxy callers without operator.read scope to access protected assistant-media files and metadata. Attackers can bypass identity-bearing HTTP auth path scope validation to retrieve sensitive media content within allowed media roots.