OpenClaw: Gateway plugin HTTP `auth: gateway` widens identity-bearing `operator.read` requests into runtime `operator.write`

Impact Gateway plugin HTTP auth: gateway widens identity-bearing operator.read requests into runtime operator.write. Plugin HTTP routes using gateway auth could receive runtime write scopes even when the upstream trusted-proxy request only declared read. OpenClaw is a user-controlled local...

@chrysb/alphaclaw (0.8.7) potentially affected by CVE-2026-42429 via openclaw (2026.4.5)

openclaw NPM version 2026.4.5 is affected by a known vulnerability. The following packages have a transitive dependency on openclaw and may be impacted: - @chrysb/alphaclaw 0.8.7 Source cves: CVE-2026-42429 Source advisory: GHSA-4F8G-77MW-3RXC...

@chrysb/alphaclaw (0.8.7) potentially affected by CVE-2026-42429 via openclaw (2026.4.5)

openclaw NPM version 2026.4.5 is affected by a known vulnerability. The following packages have a transitive dependency on openclaw and may be impacted: - @chrysb/alphaclaw 0.8.7 Source cves: CVE-2026-42429 Source advisory: SNYK:JS-OPENCLAW-15967231...

@chrysb/alphaclaw (0.8.7) potentially affected by CVE-2026-42429 via openclaw (2026.4.5)

openclaw NPM version 2026.4.5 is affected by a known vulnerability. The following packages have a transitive dependency on openclaw and may be impacted: - @chrysb/alphaclaw 0.8.7 Source cves: CVE-2026-42429 Source advisory: OSV:GHSA-4F8G-77MW-3RXC...

Improper Privilege Management

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Improper Privilege Management in the Gateway plugin HTTP. An attacker can gain unauthorized write access by sending requests that are only intended to have read privileges, resulting in...

@chrysb/alphaclaw (0.8.7) potentially affected by CVE-2026-41912 via openclaw (2026.4.5)

openclaw NPM version 2026.4.5 is affected by a known vulnerability. The following packages have a transitive dependency on openclaw and may be impacted: - @chrysb/alphaclaw 0.8.7 Source cves: CVE-2026-41912 Source advisory: OSV:GHSA-VR5G-MMX7-H897...

OpenClaw has Browser SSRF Policy Bypass via Interaction-Triggered Navigation

Impact Browser SSRF Policy Bypass via Interaction-Triggered Navigation. Browser interactions could trigger navigations that bypassed the normal SSRF navigation checks. OpenClaw is a user-controlled local assistant. This advisory is scoped to the OpenClaw trust model and does not assume a...

@chrysb/alphaclaw (0.8.7) potentially affected by CVE-2026-41912 via openclaw (2026.4.5)

openclaw NPM version 2026.4.5 is affected by a known vulnerability. The following packages have a transitive dependency on openclaw and may be impacted: - @chrysb/alphaclaw 0.8.7 Source cves: CVE-2026-41912 Source advisory: GHSA-VR5G-MMX7-H897...

Server-side Request Forgery (SSRF)

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the Interaction-Triggered Navigation. An attacker can access internal resources by triggering browser interactions that bypass normal navigation check...

@chrysb/alphaclaw (0.8.7) potentially affected by unknown CVE via openclaw (2026.4.5)

openclaw NPM version 2026.4.5 is affected by a known vulnerability. The following packages have a transitive dependency on openclaw and may be impacted: - @chrysb/alphaclaw 0.8.7 Source cves: unknown CVE Source advisory: SNYK:JS-OPENCLAW-15966965...

GHSA-VR5G-MMX7-H897 OpenClaw has Browser SSRF Policy Bypass via Interaction-Triggered Navigation

Impact Browser SSRF Policy Bypass via Interaction-Triggered Navigation. Browser interactions could trigger navigations that bypassed the normal SSRF navigation checks. OpenClaw is a user-controlled local assistant. This advisory is scoped to the OpenClaw trust model and does not assume a...

GHSA-67MF-F936-PPXF OpenClaw `node.pair.approve` placed in `operator.write` scope instead of `operator.pairing` allows unprivileged pairing approval

Impact OpenClaw node.pair.approve placed in operator.write scope instead of operator.pairing allows unprivileged pairing approval. The pairing approval method accepted operator.write instead of the narrower pairing scope and admin requirement for exec-capable nodes. OpenClaw is a user-controlled...

OpenClaw `node.pair.approve` placed in `operator.write` scope instead of `operator.pairing` allows unprivileged pairing approval

Impact OpenClaw node.pair.approve placed in operator.write scope instead of operator.pairing allows unprivileged pairing approval. The pairing approval method accepted operator.write instead of the narrower pairing scope and admin requirement for exec-capable nodes. OpenClaw is a user-controlled...

@chrysb/alphaclaw (0.8.7) potentially affected by CVE-2026-42426 via openclaw (2026.4.5)

openclaw NPM version 2026.4.5 is affected by a known vulnerability. The following packages have a transitive dependency on openclaw and may be impacted: - @chrysb/alphaclaw 0.8.7 Source cves: CVE-2026-42426 Source advisory: GHSA-67MF-F936-PPXF...

@chrysb/alphaclaw (0.8.7) potentially affected by CVE-2026-42426 via openclaw (2026.4.5)

openclaw NPM version 2026.4.5 is affected by a known vulnerability. The following packages have a transitive dependency on openclaw and may be impacted: - @chrysb/alphaclaw 0.8.7 Source cves: CVE-2026-42426 Source advisory: OSV:GHSA-67MF-F936-PPXF...

@chrysb/alphaclaw (0.8.7) potentially affected by CVE-2026-42426 via openclaw (2026.4.5)

openclaw NPM version 2026.4.5 is affected by a known vulnerability. The following packages have a transitive dependency on openclaw and may be impacted: - @chrysb/alphaclaw 0.8.7 Source cves: CVE-2026-42426 Source advisory: SNYK:JS-OPENCLAW-15966964...

Improper Privilege Management

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Improper Privilege Management via the node.pair.approve function being assigned to the broader operator.write scope instead of the intended operator.pairing scope. An attacker can gain...

OpenClaw: Feishu docx upload_file/upload_image Bypasses Workspace-Only Filesystem Policy (GHSA-qf48-qfv4-jjm9 Incomplete Fix)

Impact Feishu docx uploadfile/uploadimage Bypasses Workspace-Only Filesystem Policy GHSA-qf48-qfv4-jjm9 Incomplete Fix. Feishu document uploads could read local files outside the workspace-only file policy when processing docx upload blocks. OpenClaw is a user-controlled local assistant. This...

Incorrect Permission Assignment for Critical Resource

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Incorrect Permission Assignment for Critical Resource via the uploadfile or uploadimage process. An attacker can access files outside the intended workspace directory by uploading special...

@chrysb/alphaclaw (0.8.7) potentially affected by CVE-2026-41911 via openclaw (2026.4.5)

openclaw NPM version 2026.4.5 is affected by a known vulnerability. The following packages have a transitive dependency on openclaw and may be impacted: - @chrysb/alphaclaw 0.8.7 Source cves: CVE-2026-41911 Source advisory: OSV:GHSA-5FC7-F62M-8983...