AI agent vulnerability · OpenClaw

CVE-2026-32034: OpenClaw has an opt-in insecure Control UI auth over plaintext HTTP could allow privileged access

mediumCVSS 4.0 5.9 · 3.1 7.5GHSA-3cvx-236h-m9fj

Description In affected releases, when an operator explicitly enabled gateway.controlUi.allowInsecureAuth: true and exposed the gateway over plaintext HTTP, Control UI authentication could permit privileged operator access without the intended device identity + pairing guarantees. This required an insecure deployment choice and credential exposure risk (for example, plaintext transit or prior token leak).

Published Mar 3, 2026 · Updated Mar 25, 2026

Affected packages

openclaw

Ecosystem: npm
Affected: <= 2026.2.19-2
Fixed in: 2026.2.21
Check: npm ls openclaw

Advisory details

From the GitHub Advisory Database (CC BY 4.0).

Description

In affected releases, when an operator explicitly enabled gateway.controlUi.allowInsecureAuth: true and exposed the gateway over plaintext HTTP, Control UI authentication could permit privileged operator access without the intended device identity + pairing guarantees.

This required an insecure deployment choice and credential exposure risk (for example, plaintext transit or prior token leak). It was fixed on main in commit 40a292619e1f2be3a3b1db663d7494c9c2dc0abf (PR #20684).

Affected Packages / Versions

Package: openclaw (npm)
Affected published versions: <= 2026.2.19-2
Planned patched version: 2026.2.21

Impact

In these explicitly insecure deployments, an attacker with leaked/intercepted credentials could obtain high-privilege Control UI access.

Fix Commit(s)

40a292619e1f2be3a3b1db663d7494c9c2dc0abf (merged 2026-02-20)

OpenClaw thanks @Vasco0x4 for reporting.

Credited to Vasco0x4.

References

How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology

More OpenClaw vulnerabilities

All OpenClaw entries