https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 03:47:22 +0000 https://vulnerability.circl.lu/vuln/cve-2026-22174 <p><strong>Affected:</strong> OpenClaw</p> <p>OpenClaw versions prior to 2026.2.22 inject the x-OpenClaw-relay-token header into Chrome CDP probe traffic on loopback interfaces, allowing local processes to capture the Gateway authentication token. An attacker controlling a loopback port can intercept CDP reachability probes to the /json/version endpoint and reuse the leaked token as Gateway bearer authentication.</p> <p><strong>Affected:</strong> OpenClaw</p> <p>OpenClaw versions prior to 2026.2.22 inject the x-OpenClaw-relay-token header into Chrome CDP probe traffic on loopback interfaces, allowing local processes to capture the Gateway authentication token. An attacker controlling a loopback port can intercept CDP reachability probes to the /json/version endpoint and reuse the leaked token as Gateway bearer authentication.</p> https://vulnerability.circl.lu/vuln/cve-2026-22174 https://vulnerability.circl.lu/vuln/ghsa-v3j7-34xh-6g3w <p><strong>Affected:</strong> npm: openclaw</p> <p>### Summary A local process can capture the OpenClaw Gateway auth token from Chrome CDP probe traffic on loopback.</p> <p>### Details Affected versions inject `x-openclaw-relay-token` for loopback CDP URLs, and CDP reachability probes send that header to `/json/version`. If an attacker controls the probed loopback port, they can read that token and reuse it as Gateway bearer auth.</p> <p>Relevant code paths (pre-fix): - `src/browser/extension-relay.ts` (`getChromeExtensionRelayAuthHeaders`) - `src/browser/cdp.helpers.ts` (`getHeadersWithAuth`) - `src/browser/chrome.ts` (`fetchChromeVersion`)</p> <p>### Affected Packages / Versions - Package: `openclaw` (npm) - Latest published (at triage): `2026.2.21-2` - Vulnerable: `&lt;= 2026.2.21-2` - Patched: &gt;= 2026.2.22</p> <p>### Deployment Model Applicability This does **not** change OpenClaw’s documented security model for standard single-owner installs (you own the machine/VPS and trust local processes under that OS account boundary). Risk is for **non-standard shared-user/shared-host installs** where an untrusted local user/process can race/bind the loopback relay port.</p> <p>### Impact - Local credential disclosure. - Follow-on impact depends on local deployment and enabled Gateway capabilities.</p> <p>### Fix Commit(s) - `afa22acc4a09fdf32be8a167ae216bee85c30dad`</p> <p>### Release Process Note Patched version is set to &gt;= 2026.2.22 for the published release.</p> <p>OpenClaw thanks @tdjackey for reporting.</p> <p><strong>Affected:</strong> npm: openclaw</p> <p>### Summary A local process can capture the OpenClaw Gateway auth token from Chrome CDP probe traffic on loopback.</p> <p>### Details Affected versions inject `x-openclaw-relay-token` for loopback CDP URLs, and CDP reachability probes send that header to `/json/version`. If an attacker controls the probed loopback port, they can read that token and reuse it as Gateway bearer auth.</p> <p>Relevant code paths (pre-fix): - `src/browser/extension-relay.ts` (`getChromeExtensionRelayAuthHeaders`) - `src/browser/cdp.helpers.ts` (`getHeadersWithAuth`) - `src/browser/chrome.ts` (`fetchChromeVersion`)</p> <p>### Affected Packages / Versions - Package: `openclaw` (npm) - Latest published (at triage): `2026.2.21-2` - Vulnerable: `&lt;= 2026.2.21-2` - Patched: &gt;= 2026.2.22</p> <p>### Deployment Model Applicability This does **not** change OpenClaw’s documented security model for standard single-owner installs (you own the machine/VPS and trust local processes under that OS account boundary). Risk is for **non-standard shared-user/shared-host installs** where an untrusted local user/process can race/bind the loopback relay port.</p> <p>### Impact - Local credential disclosure. - Follow-on impact depends on local deployment and enabled Gateway capabilities.</p> <p>### Fix Commit(s) - `afa22acc4a09fdf32be8a167ae216bee85c30dad`</p> <p>### Release Process Note Patched version is set to &gt;= 2026.2.22 for the published release.</p> <p>OpenClaw thanks @tdjackey for reporting.</p> https://vulnerability.circl.lu/vuln/ghsa-v3j7-34xh-6g3w