~ / search / GHSA-3cw3-5vxw-g2h3

GHSA-3cw3-5vxw-g2h3

OpenClaw: CLI Remote Onboarding Persists Unauthenticated Discovery Endpoint and Exfiltrates Gateway Credentials

Source: GitHub Advisory Database (reviewed) High CVE-2026-41342

Packages

EcosystemPackageAffectedFixed in
npm openclaw < 2026.3.28 2026.3.28

Details

As written in the advisory (Markdown source, shown as plain text).

## Summary Remote onboarding accepted discovered gateway endpoints without an explicit trust confirmation before persisting the remote URL and connection details. ## Impact A malicious or spoofed discovery endpoint could steer onboarding toward an attacker-controlled gateway and capture future gateway credentials or traffic. ## Affected Component `src/commands/onboard-remote.ts` ## Fixed Versions - Affected: `<= 2026.3.24` - Patched: `>= 2026.3.28` - Latest stable `2026.3.28` contains the fix. ## Fix Fixed by commit `d6affb17d8` (`CLI: confirm discovered remote gateways before saving config`).

References

External links from the advisory. They lead to third-party sites.