GHSA-7jm2-g593-4qrc

Suggest an improvement
Source
https://github.com/advisories/GHSA-7jm2-g593-4qrc
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/04/GHSA-7jm2-g593-4qrc/GHSA-7jm2-g593-4qrc.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-7jm2-g593-4qrc
Downstream
Published
2026-04-25T23:51:11Z
Modified
2026-05-05T16:03:36.740207Z
Severity
  • 6.0 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N CVSS Calculator
Summary
OpenClaw: Agent gateway config mutations could change protected operator settings
Details

Affected Packages / Versions

  • Package: openclaw (npm)
  • Affected versions: < 2026.4.20
  • Patched version: 2026.4.20

Impact

The agent-facing gateway config.patch / config.apply guard did not cover several operator-trusted settings, including sandbox policy, plugin enablement, gateway auth/TLS, hook routing, MCP server configuration, SSRF policy, and filesystem hardening. A prompt-injected model with access to the owner-only gateway tool could persist changes to those settings.

This is a model-to-operator guard bypass, not a remote unauthenticated gateway compromise. Severity is medium.

Fix

OpenClaw now blocks model-driven gateway config mutations for the broader operator-trusted path set and covers per-agent overrides and array-entry patching.

Fix commit:

  • fe30b31a97a917ecc6e92f6c85378b6b20352422

Release

Fixed in OpenClaw 2026.4.20.

Database specific 
{
    "github_reviewed_at": "2026-04-25T23:51:11Z",
    "github_reviewed": true,
    "cwe_ids": [
        "CWE-1220",
        "CWE-285"
    ],
    "nvd_published_at": null,
    "severity": "MODERATE"
}
References

Affected packages

npm / openclaw

Package

Name
openclaw
View open source insights on deps.dev
Purl
pkg:npm/openclaw

Affected ranges

Type
SEMVER
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2026.4.20

Database specific

source 
"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/04/GHSA-7jm2-g593-4qrc/GHSA-7jm2-g593-4qrc.json"