요약
- CVE-2026-32898은(는) openclaw (openclaw), openclaw에 영향을 주는 보통 (CVSS 5.4) 취약점입니다.
- 향후 30일 내 악용 확률(EPSS): 0.26%, 전체 취약점의 18.1%보다 높음.
- 조치: 2026.2.23 이상으로 업데이트하세요.
| Package | Affected versions | Patched versions |
|---|
| openclaw | < 2026.2.23
| 2026.2.23
|
| openclaw npm | < 2026.2.23
| 2026.2.23
|
Description
Vulnerability Summary
The OpenClaw ACP client could auto-approve tool calls based on untrusted metadata and permissive name heuristics. A malicious or compromised ACP tool invocation could bypass expected interactive approval prompts for read-class operations.
Affected Packages / Versions
- Package: npm
openclaw
- Affected published versions:
<= 2026.2.22-2 (latest published as of February 24, 2026 is 2026.2.22-2)
- Patched in code on
main: 2026.2.23 (released)
Technical Details
- Permission classification trusted incoming
toolCall.kind and heuristic name matching.
- Non-core read-like names and spoofed kind metadata could reach auto-approve paths.
read operations were not scoped strongly enough to cwd in all metadata/title forms.
Fix
- Require trusted core tool IDs for auto-approval and ignore untrusted
toolCall.kind as an authorization source.
- Scope
read auto-approval to cwd-resolved paths.
- Add stricter tool-name validation and regression coverage for spoofed kind and non-core read-like names.
Affected Functions
resolvePermissionRequestresolveToolNameForPermissionshouldAutoApproveToolCall
Fix Commit(s)
12cc754332f9a7c92e158ce7644aa22df79c090463dcd28ae0be2de1c75af09cc81841cebeec068f
Found using MCPwner
Thanks @nedlir for reporting.
NVD description
OpenClaw versions prior to 2026.2.23 contain an authorization bypass vulnerability in the ACP client that auto-approves tool calls based on untrusted toolCall.kind metadata and permissive name heuristics. Attackers can bypass interactive approval prompts for read-class operations by spoofing tool metadata or using non-core read-like names to reach auto-approve paths.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free