https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-02T20:22:22.695330+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-3691 CVE-2026-3691 — OpenClaw Client PKCE Verifier Information Disclosure Vulnerability 2026-10-02T20:22:22.697484+00:00

Affected: OpenClaw

OpenClaw Client PKCE Verifier Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose stored credentials on affected installations of OpenClaw. User interaction is required to exploit this vulnerability in that the target must initiate an OAuth authorization flow.

The specific flaw exists within the implementation of OAuth authorization. The issue results from the exposure of sensitive data in the authorization URL query string. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-29381.

 https://vulnerability.circl.lu/vuln/ghsa-6g25-pc82-vfwp GHSA-6g25-pc82-vfwp — OpenClaw: macOS beta onboarding exposed PKCE verifier via OAuth state 2026-10-02T20:22:22.697610+00:00

Affected: npm: openclaw

### Summary

The affected surface is the OpenClaw macOS app onboarding flow, and the macOS app is currently in **beta**. In that beta onboarding flow, Anthropic OAuth used the PKCE `code_verifier` value as OAuth `state`, exposing that secret in front-channel URL state.

### Affected Packages / Versions

- Package: `openclaw` (npm) - Affected versions: `<= 2026.2.24` (latest published npm at triage time) - Affected surface: macOS app beta onboarding path (`apps/macos`) - Not affected: core CLI/gateway onboarding paths - Patched version : `2026.2.25`

### Impact

Scope is limited to the macOS beta onboarding OAuth path. Exploitation required obtaining both OAuth authorization artifacts and exposed `state` values during that flow.

### Remediation

OpenClaw removed Anthropic OAuth sign-in from macOS onboarding and now supports setup-token-only Anthropic subscription auth in this path.

### Fix Commit(s)

- `8f3310000a8b0c11eced054c2cdb6fb27803511a`

### Release Process Note

`patched_versions` is pre-set to the release (`2026.2.25`). Advisory published with npm release `2026.2.25`.2.25` is published, this advisory is published.

OpenClaw thanks @zdi-disclosures for reporting.