Em resumo
- CVE-2026-41299 é uma vulnerabilidade ALTO (CVSS 7.1) que afeta openclaw (openclaw), openclaw.
- Chance de exploração nos próximos 30 dias (EPSS): 0.20%, maior que 10.3% das vulnerabilidades.
- Correção: atualize para 2026.3.28 ou posterior.
| Package | Affected versions | Patched versions |
|---|
| openclaw | < 2026.3.28
| 2026.3.28
|
| openclaw npm | < 2026.3.28
| 2026.3.28
|
Description
Summary
ACP-only provenance fields in chat.send were gated by self-declared client metadata from the WebSocket handshake rather than verified authorization state.
Impact
A normal authenticated operator client could spoof ACP identity labels and inject reserved provenance fields intended only for the ACP bridge.
Affected Component
src/gateway/server-methods/chat.ts, src/gateway/server/ws-connection/message-handler.ts
Fixed Versions
- Affected:
<= 2026.3.24
- Patched:
>= 2026.3.28
- Latest stable
2026.3.28 contains the fix.
Fix
Fixed by commit 4b9542716c (Gateway: require verified scope for chat provenance).
NVD description
OpenClaw before 2026.3.28 contains an authorization bypass vulnerability in the chat.send gateway method where ACP-only provenance fields are gated by self-declared client metadata from WebSocket handshake rather than verified authorization state. Authenticated operator clients can spoof ACP identity labels and inject reserved provenance fields intended only for the ACP bridge by manipulating client metadata during connection.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free