GHSA-659f-22xc-98f2

Source

https://github.com/advisories/GHSA-659f-22xc-98f2

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/03/GHSA-659f-22xc-98f2/GHSA-659f-22xc-98f2.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-659f-22xc-98f2

Downstream

MINI-wg57-32m4-x6c9

Published

2026-03-03T23:00:53Z

Modified

2026-03-04T15:13:19.961962Z

Severity

7.3 (High) CVSS_V4 - CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N CVSS Calculator

Summary

OpenClaw hook transform path containment missed symlink-resolved escapes

Details

Vulnerability

Webhook transform modules were validated with lexical path checks only. A symlink under the allowed hooks transform tree could resolve outside the intended directory and be dynamically imported.

Affected Packages / Versions

Package: openclaw (npm)
Affected versions: <= 2026.2.21-2
Patched version (planned next release): 2026.2.22

Impact

When an attacker can cause a transform module path to reference a symlinked entry that resolves outside the trusted transform directory, the gateway may import and execute unintended JavaScript with gateway-process privileges.

Attack Preconditions

Hook transforms are enabled and reachable.
Attacker can influence transform path resolution (for example via privileged config access and/or writable filesystem path in the transform tree).
A symlink escape exists to attacker-controlled code.

Remediation

Enforce realpath-aware containment for existing path ancestors before dynamic import.
Keep lexical containment checks for traversal and absolute-path escapes.
Add regression coverage for:
- transform module symlink escape rejection,
- hooks.transformsDir symlink escape rejection,
- in-root symlink allow-case.

Fix Commit(s)

f4dd0577b055f77af783105bd65eae32f3d5e6a1

OpenClaw thanks @aether-ai-agent for reporting.

Database specific

{
    "github_reviewed": true,
    "github_reviewed_at": "2026-03-03T23:00:53Z",
    "cwe_ids": [
        "CWE-94"
    ],
    "severity": "HIGH",
    "nvd_published_at": null
}

References

Affected packages

npm / openclaw

Package

Name: openclaw; View open source insights on deps.dev
Purl: pkg:npm/openclaw

Affected ranges

Type: SEMVER
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2026.2.22

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/03/GHSA-659f-22xc-98f2/GHSA-659f-22xc-98f2.json"

last_known_affected_version_range

"<= 2026.2.21-2"