https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 02:10:07 +0000 https://vulnerability.circl.lu/vuln/cve-2026-53840 <p><strong>Affected:</strong> OpenClaw</p> <p>OpenClaw before 2026.5.12 contains an information disclosure vulnerability in streamable-http MCP servers that forwards operator-configured custom headers during cross-origin redirects. Attackers controlling or compromising an MCP endpoint can redirect requests to exfiltrate sensitive headers like API keys or tenant-routing credentials to attacker-controlled origins.</p> <p><strong>Affected:</strong> OpenClaw</p> <p>OpenClaw before 2026.5.12 contains an information disclosure vulnerability in streamable-http MCP servers that forwards operator-configured custom headers during cross-origin redirects. Attackers controlling or compromising an MCP endpoint can redirect requests to exfiltrate sensitive headers like API keys or tenant-routing credentials to attacker-controlled origins.</p> https://vulnerability.circl.lu/vuln/cve-2026-53840 https://vulnerability.circl.lu/vuln/ghsa-rjxq-qqhf-8hwh <p><strong>Affected:</strong> npm: openclaw</p> <p>### Summary</p> <p>OpenClaw supports remote MCP Streamable HTTP servers with operator-configured custom headers. In affected releases, those headers could be forwarded when the MCP endpoint responded with a cross-origin redirect.</p> <p>This issue is limited to configured MCP Streamable HTTP servers that use custom headers. It does not expose unrelated OpenClaw credentials.</p> <p>### Affected configurations</p> <p>This affects deployments where an MCP server is configured with:</p> <p>- `transportType: &#34;streamable-http&#34;` - sensitive custom headers under `mcp.servers.*.headers` - an MCP endpoint that is malicious, compromised, or able to redirect to another origin</p> <p>### Impact</p> <p>Custom MCP headers, such as API keys or tenant-routing headers, could be sent to the redirect target. The exposed credential scope depends on the header the operator configured for that MCP server.</p> <p>### Patched Versions</p> <p>The first stable patched version is `2026.5.12`.</p> <p>### Mitigations</p> <p>Upgrade to `openclaw@2026.5.8` or later. Before upgrading, avoid custom MCP headers with servers you do not fully trust, and rotate any MCP-specific credentials that may have been exposed by a redirecting endpoint.</p> <p><strong>Affected:</strong> npm: openclaw</p> <p>### Summary</p> <p>OpenClaw supports remote MCP Streamable HTTP servers with operator-configured custom headers. In affected releases, those headers could be forwarded when the MCP endpoint responded with a cross-origin redirect.</p> <p>This issue is limited to configured MCP Streamable HTTP servers that use custom headers. It does not expose unrelated OpenClaw credentials.</p> <p>### Affected configurations</p> <p>This affects deployments where an MCP server is configured with:</p> <p>- `transportType: &#34;streamable-http&#34;` - sensitive custom headers under `mcp.servers.*.headers` - an MCP endpoint that is malicious, compromised, or able to redirect to another origin</p> <p>### Impact</p> <p>Custom MCP headers, such as API keys or tenant-routing headers, could be sent to the redirect target. The exposed credential scope depends on the header the operator configured for that MCP server.</p> <p>### Patched Versions</p> <p>The first stable patched version is `2026.5.12`.</p> <p>### Mitigations</p> <p>Upgrade to `openclaw@2026.5.8` or later. Before upgrading, avoid custom MCP headers with servers you do not fully trust, and rotate any MCP-specific credentials that may have been exposed by a redirecting endpoint.</p> https://vulnerability.circl.lu/vuln/ghsa-rjxq-qqhf-8hwh