OpenClaw: macOS beta onboarding exposed PKCE verifier via OAuth state

MÉDIO 5.3CVE-2026-3691 · GHSA-6g25-pc82-vfwp · Published 11/04/2026 · updated 17/06/2026

Em resumo

CVE-2026-3691 é uma vulnerabilidade MÉDIO (CVSS 5.3) que afeta openclaw (openclaw), openclaw.
Chance de exploração nos próximos 30 dias (EPSS): 0.46%, maior que 39.9% das vulnerabilidades.
Correção: atualize para 2026.2.25 ou posterior.

Package	Affected versions	Patched versions
openclaw openclaw	`< 2026.2.25`	`2026.2.25`
openclaw npm	`< 2026.2.25`	`2026.2.25`

Description

Summary

The affected surface is the OpenClaw macOS app onboarding flow, and the macOS app is currently in beta. In that beta onboarding flow, Anthropic OAuth used the PKCE code_verifier value as OAuth state, exposing that secret in front-channel URL state.

Affected Packages / Versions

Package: openclaw (npm)
Affected versions: <= 2026.2.24 (latest published npm at triage time)
Affected surface: macOS app beta onboarding path (apps/macos)
Not affected: core CLI/gateway onboarding paths
Patched version : 2026.2.25

Impact

Scope is limited to the macOS beta onboarding OAuth path. Exploitation required obtaining both OAuth authorization artifacts and exposed state values during that flow.

Remediation

OpenClaw removed Anthropic OAuth sign-in from macOS onboarding and now supports setup-token-only Anthropic subscription auth in this path.

Fix Commit(s)

8f3310000a8b0c11eced054c2cdb6fb27803511a

Release Process Note

patched_versions is pre-set to the release (2026.2.25). Advisory published with npm release 2026.2.25.2.25` is published, this advisory is published.

OpenClaw thanks @zdi-disclosures for reporting.

NVD description

OpenClaw Client PKCE Verifier Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose stored credentials on affected installations of OpenClaw. User interaction is required to exploit this vulnerability in that the target must initiate an OAuth authorization flow. The specific flaw exists within the implementation of OAuth authorization. The issue results from the exposure of sensitive data in the authorization URL query string. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-29381.

References

openclaw/openclaw security advisory · WEB
openclaw/openclaw commit 8f33100 · WEB
openclaw/openclaw · PACKAGE
zerodayinitiative.com/advisories/ZDI-26-229 · Third Party Advisory

Mais vulnerabilidades de openclaw

Ver tudo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

openclaw

< 2026.2.25

2026.2.25

openclaw

npm

< 2026.2.25

2026.2.25

Description

Summary

Affected Packages / Versions

Package: openclaw (npm)
Affected versions: <= 2026.2.24 (latest published npm at triage time)
Affected surface: macOS app beta onboarding path (apps/macos)
Not affected: core CLI/gateway onboarding paths
Patched version : 2026.2.25

Impact

Scope is limited to the macOS beta onboarding OAuth path. Exploitation required obtaining both OAuth authorization artifacts and exposed state values during that flow.

Remediation

OpenClaw removed Anthropic OAuth sign-in from macOS onboarding and now supports setup-token-only Anthropic subscription auth in this path.

Fix Commit(s)

8f3310000a8b0c11eced054c2cdb6fb27803511a

Release Process Note

patched_versions is pre-set to the release (2026.2.25). Advisory published with npm release 2026.2.25.2.25` is published, this advisory is published.

OpenClaw thanks @zdi-disclosures for reporting.

NVD description

Mais vulnerabilidades de openclaw

Ver tudo →