GitHub Advisoryadvisory · npm

GHSA-g55j-c2v4-pjcg OpenClaw vulnerable to Unauthenticated Local RCE via WebSocket config.apply

HIGH Published 2026-02-04 Modified 2026-02-06 Official page ↗
Aliases
CVE-2026-25593
Ecosystem
npm
Packages
openclaw
Severity
High
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-20, CWE-306, CWE-78
Reviewed
2026-02-04

Affected packages

• npm openclaw: < 2026.1.20 → fixed in 2026.1.20

Description

Summary An unauthenticated local client could use the Gateway WebSocket API to write config via `config.apply` and set unsafe `cliPath` values that were later used for command discovery, enabling command injection as the gateway user. Impact A local process on the same machine could execute arbitrary commands as the gateway process user. Details • `config.apply` accepted raw JSON and wrote it to disk after schema validation. • `cliPath` values were not constrained to safe executable names/paths. • Command discovery used a shell invocation when resolving executables. Mitigation Upgrade to a patched release. If projects cannot upgrade immediately, set `gateway.auth` and avoid custom `cliPath` values.

Related

Alias · CVE (1)

Weakness · CWE (3)

  • CWE-20 Improper Input Validation weakness
  • CWE-306 Missing Authentication for Critical Functionality weakness
  • CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness

References