| Package | Affected versions | Patched versions |
|---|---|---|
| openclaw | < 2026.3.28 | 2026.3.28 |
| openclaw | < 2026.3.28 | 2026.3.28 |
ACP-only provenance fields in chat.send were gated by self-declared client metadata from the WebSocket handshake rather than verified authorization state.
A normal authenticated operator client could spoof ACP identity labels and inject reserved provenance fields intended only for the ACP bridge.
src/gateway/server-methods/chat.ts, src/gateway/server/ws-connection/message-handler.ts
<= 2026.3.24>= 2026.3.282026.3.28 contains the fix.Fixed by commit 4b9542716c (Gateway: require verified scope for chat provenance).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free