GitHub Advisoryadvisory · npm

GHSA-6xg4-82hv-cp6f OpenClaw: Gateway chat.send ACP-only provenance guard could be bypassed by client identity spoofing

HIGH Published 2026-03-31 Modified 2026-04-20 Official page ↗
Aliases
CVE-2026-41299
Ecosystem
npm
Packages
openclaw
Severity
High
Weaknesses
CWE-290, CWE-807
Reviewed
2026-03-31

Affected packages

• npm openclaw: < 2026.3.28 → fixed in 2026.3.28

Description

Summary ACP-only provenance fields in `chat.send` were gated by self-declared client metadata from the WebSocket handshake rather than verified authorization state. Impact A normal authenticated operator client could spoof ACP identity labels and inject reserved provenance fields intended only for the ACP bridge. Affected Component `src/gateway/server-methods/chat.ts, src/gateway/server/ws-connection/message-handler.ts` Fixed Versions • Affected: `= 2026.3.28` • Latest stable `2026.3.28` contains the fix. Fix Fixed by commit `4b9542716c` (`Gateway: require verified scope for chat provenance`).

Related

Alias · CVE (1)

  • CVE-2026-41299 OpenClaw before 2026.3.28 contains an authorization bypass vulnerability in the chat.send gateway method where ACP-only provenance fields… vulnerability

Weakness · CWE (2)

  • CWE-290 Authentication Bypass by Spoofing weakness
  • CWE-807 Reliance on Untrusted Inputs in a Security Decision weakness

References