GitHub Advisoryadvisory · npm

GHSA-57r2-h2wj-g887 OpenClaw: Isolated cron awareness events were recorded as trusted system events

LOW Published 2026-04-25 Modified 2026-05-19 Official page ↗
Aliases
CVE-2026-44999
Ecosystem
npm
Packages
openclaw
Severity
Low
CVSS vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U
Weaknesses
CWE-345
Reviewed
2026-04-25

Affected packages

• npm openclaw: < 2026.4.20 → fixed in 2026.4.20

Description

Affected Packages / Versions • Package: `openclaw` (npm) • Affected versions: `< 2026.4.20` • Patched version: `2026.4.20` Impact Output from webhook-triggered isolated cron agent runs could be queued into the main session awareness stream without `trusted: false`. That made the event render as a trusted `System:` event instead of an untrusted system event. This is a trust-labeling issue that can strengthen prompt-injection impact, but it does not directly bypass gateway auth, tool policy, or sandboxing. Severity is low. Fix OpenClaw now preserves untrusted labels for isolated cron awareness events and forwards the trust flag through cron delivery helpers. Fix commit: • `f61896b03cc7031f51106a04566831f4ac2a0bd7` Release Fixed in OpenClaw `2026.4.20`.

Related

Alias · CVE (1)

  • CVE-2026-44999 OpenClaw before 2026.4.20 fails to properly preserve untrusted labels for isolated cron awareness events, allowing webhook-triggered cron… vulnerability

Weakness · CWE (1)

  • CWE-345 Insufficient Verification of Data Authenticity weakness

References