Free AI Safety Workshop — in collaboration with explainx.aiSave your seat
AgentbeamBeta
AI agent vulnerability · OpenClaw

GHSA-8m9v-xpgf-g99m: OpenClaw has an unauthorized sender bypass in its stop triggers and /models command authorization

mediumCVSS 4.0 6.9

Summary Unauthorized senders could trigger two command paths without sender authorization checks: 1. stop-like natural-language abort triggers 2. /models command output Impact An unauthorized sender could disrupt active sessions and view model/auth metadata that should be authorization-gated. Fix Sender authorization is now enforced for stop-like abort triggers and /models listings.

Published Mar 2, 2026

Affected packages

openclaw

Ecosystem
npm
Affected
< 2026.3.1
Fixed in
2026.3.1
Check
npm ls openclaw

Advisory details

From the GitHub Advisory Database (CC BY 4.0).

Summary

Unauthorized senders could trigger two command paths without sender authorization checks:

  1. stop-like natural-language abort triggers
  2. /models command output

Impact

An unauthorized sender could disrupt active sessions and view model/auth metadata that should be authorization-gated.

Fix

Sender authorization is now enforced for stop-like abort triggers and /models listings.

Affected and Patched Versions

  • Affected: <= 2026.2.26
  • Patched: 2026.3.1

Credited to tdjackey.

References

How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology

More OpenClaw vulnerabilities

All OpenClaw entries