GitStock

openclaw/openclaw · Security

OpenClaw has an unauthorized sender bypass in its stop triggers and /models command authorization

Open GitHub
GHSA ID
GHSA-8m9v-xpgf-g99m
Severity
medium
Published
Updated
CVSS v4
6.9 · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Description

Summary

Unauthorized senders could trigger two command paths without sender authorization checks:

  1. stop-like natural-language abort triggers
  2. /models command output

Impact

An unauthorized sender could disrupt active sessions and view model/auth metadata that should be authorization-gated.

Fix

Sender authorization is now enforced for stop-like abort triggers and /models listings.

Affected and Patched Versions

  • Affected: <= 2026.2.26
  • Patched: 2026.3.1

CWEs

  • CWE-863 · Incorrect Authorization

References