GitHub Advisoryadvisory · npm

GHSA-7g8c-cfr3-vqqr OpenClaw: Agent hook events could enqueue trusted system events from unsanitized external input

MEDIUM Published 2026-04-17 Modified 2026-05-08 Official page ↗
Aliases
CVE-2026-43534
Ecosystem
npm
Packages
openclaw
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Weaknesses
CWE-269, CWE-345
Reviewed
2026-04-17

Affected packages

• npm openclaw: < 2026.4.10 → fixed in 2026.4.10

Description

Summary Agent hook events could enqueue trusted system events from unsanitized external input. Affected Packages / Versions • Package: `openclaw` • Ecosystem: npm • Affected versions: `= 2026.4.10` Impact Agent hook dispatch could turn externally supplied hook metadata into trusted system events, allowing untrusted input to enter the agent as higher-trust context. Technical Details The fix sanitizes hook names and marks agent hook system events as untrusted before enqueueing them. Fix The issue was fixed in #64372. The first stable tag containing the fix is `v2026.4.10`, and `[email protected]` includes the fix. Fix Commit(s) • `e3a845bde5b54f4f1e742d0a51ba9860f9619b29` • PR: #64372 Release Process Note Users should upgrade to `openclaw` 2026.4.10 or newer. The latest npm release, `2026.4.14`, already includes the fix. Credits Thanks to @zsxsoft, with sponsorship from @KeenSecurityLab and @qclawer for reporting this issue.

Related

Alias · CVE (1)

  • CVE-2026-43534 OpenClaw before 2026.4.10 contains an input validation vulnerability that allows external hook metadata to be enqueued as trusted system… vulnerability

Weakness · CWE (2)

  • CWE-269 Improper Privilege Management weakness
  • CWE-345 Insufficient Verification of Data Authenticity weakness

References