GitHub Advisoryadvisory · npm

GHSA-82qx-6vj7-p8m2 OpenClaw: Channel setup catalog lookups could include untrusted workspace plugin shadows

HIGH Published 2026-04-17 Modified 2026-05-08 Official page ↗
Aliases
CVE-2026-43571
Ecosystem
npm
Packages
openclaw
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-829, CWE-862
Reviewed
2026-04-17

Affected packages

• npm openclaw: < 2026.4.10 → fixed in 2026.4.10

Description

Summary Channel setup catalog lookups could include untrusted workspace plugin shadows. Affected Packages / Versions • Package: `openclaw` • Ecosystem: npm • Affected versions: `= 2026.4.10` Impact Channel setup could resolve a workspace plugin shadow before a bundled channel plugin, causing setup-time plugin loading without the intended trust gate. Technical Details The fix routes setup catalog lookups through trusted catalog paths and uses `excludeWorkspace: true` where setup should not include workspace shadows. Fix The issue was fixed in the advisory fix branch. The first stable tag containing the fix is `v2026.4.10`, and `[email protected]` includes the fix. Fix Commit(s) • `1fede43b948df40ca8674511d4bd08d39f6c5837` • PR: private advisory fork Release Process Note Users should upgrade to `openclaw` 2026.4.10 or newer. The latest npm release, `2026.4.14`, already includes the fix. Credits Thanks to @zsxsoft, with sponsorship from @KeenSecurityLab and @qclawer for reporting this issue.

Related

Alias · CVE (1)

  • CVE-2026-43571 OpenClaw before 2026.4.10 contains a plugin trust bypass vulnerability that allows channel setup catalog lookups to resolve workspace… vulnerability

Weakness · CWE (2)

  • CWE-829 Inclusion of Functionality from Untrusted Control Sphere weakness
  • CWE-862 Missing Authorization weakness

References