https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 07:44:09 +0000 https://cve.radiocsirt.org/vuln/brew-openclaw-cli-cve-2026-35619 <p><strong>Affected:</strong> Homebrew: openclaw-cli</p> <p>&gt; Fixed in OpenClaw 2026.3.24, the current shipping release.</p> <p>## Summary</p> <p>The OpenAI-compatible HTTP endpoint `/v1/models` accepts bearer auth but does not enforce operator method scopes.</p> <p>In contrast, the WebSocket RPC path enforces `operator.read` for `models.list`.</p> <p>A caller connected with `operator.approvals` (no read scope) is rejected for `models.list` (`missing scope: operator.read`) but can still enumerate model metadata through HTTP `/v1/models`.</p> <p>Confirmed on current `main` at commit `06de515b6c42816b62ec752e1c221cab67b38501`.</p> <p>## Details</p> <p>The WS control-plane path enforces role/scope checks centrally before dispatching methods. For non-admin operators, this includes required method scopes such as `operator.read` for `models.list`.</p> <p>The HTTP compatibility path for `/v1/models` performs bearer authorization and then returns model metadata; it does not apply an equivalent scope check.</p> <p>As reproduced, a caller with only `operator.approvals` can:</p> <p>1. connect successfully, 2. fail `models.list` over WS with `missing scope: operator.read`, 3. fetch `/v1/models` over HTTP with status 200 and model data.</p> <p>This is a cross-surface authorization inconsistency where the stricter WS policy can be bypassed via HTTP.</p> <p>## Impact</p> <p>- Callers lacking `operator.read` can still enumerate gateway model metadata through HTTP compatibility routes. - Breaks scope model consistency between WS RPC and HTTP surfaces. - Weakens least-privilege expectations for operators granted non-read scopes…</p> <p><strong>Affected:</strong> Homebrew: openclaw-cli</p> <p>&gt; Fixed in OpenClaw 2026.3.24, the current shipping release.</p> <p>## Summary</p> <p>The OpenAI-compatible HTTP endpoint `/v1/models` accepts bearer auth but does not enforce operator method scopes.</p> <p>In contrast, the WebSocket RPC path enforces `operator.read` for `models.list`.</p> <p>A caller connected with `operator.approvals` (no read scope) is rejected for `models.list` (`missing scope: operator.read`) but can still enumerate model metadata through HTTP `/v1/models`.</p> <p>Confirmed on current `main` at commit `06de515b6c42816b62ec752e1c221cab67b38501`.</p> <p>## Details</p> <p>The WS control-plane path enforces role/scope checks centrally before dispatching methods. For non-admin operators, this includes required method scopes such as `operator.read` for `models.list`.</p> <p>The HTTP compatibility path for `/v1/models` performs bearer authorization and then returns model metadata; it does not apply an equivalent scope check.</p> <p>As reproduced, a caller with only `operator.approvals` can:</p> <p>1. connect successfully, 2. fail `models.list` over WS with `missing scope: operator.read`, 3. fetch `/v1/models` over HTTP with status 200 and model data.</p> <p>This is a cross-surface authorization inconsistency where the stricter WS policy can be bypassed via HTTP.</p> <p>## Impact</p> <p>- Callers lacking `operator.read` can still enumerate gateway model metadata through HTTP compatibility routes. - Breaks scope model consistency between WS RPC and HTTP surfaces. - Weakens least-privilege expectations for operators granted non-read scopes…</p> https://cve.radiocsirt.org/vuln/brew-openclaw-cli-cve-2026-35619 https://cve.radiocsirt.org/vuln/euvd-2026-329497 EUVD-2026-329497 https://cve.radiocsirt.org/vuln/euvd-2026-329497 https://cve.radiocsirt.org/vuln/fkie_cve-2026-35619 <p>OpenClaw before 2026.3.24 contains an authorization bypass vulnerability in the HTTP /v1/models endpoint that fails to enforce operator read scope requirements. Attackers with only operator.approvals scope can enumerate gateway model metadata through the HTTP compatibility route, bypassing the stricter WebSocket RPC authorization checks.</p> <p>OpenClaw before 2026.3.24 contains an authorization bypass vulnerability in the HTTP /v1/models endpoint that fails to enforce operator read scope requirements. Attackers with only operator.approvals scope can enumerate gateway model metadata through the HTTP compatibility route, bypassing the stricter WebSocket RPC authorization checks.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-35619 https://cve.radiocsirt.org/vuln/ghsa-68f8-9mhj-h2mp <p><strong>Affected:</strong> npm: openclaw</p> <p>&gt; Fixed in OpenClaw 2026.3.24, the current shipping release.</p> <p>## Summary</p> <p>The OpenAI-compatible HTTP endpoint `/v1/models` accepts bearer auth but does not enforce operator method scopes.</p> <p>In contrast, the WebSocket RPC path enforces `operator.read` for `models.list`.</p> <p>A caller connected with `operator.approvals` (no read scope) is rejected for `models.list` (`missing scope: operator.read`) but can still enumerate model metadata through HTTP `/v1/models`.</p> <p>Confirmed on current `main` at commit `06de515b6c42816b62ec752e1c221cab67b38501`.</p> <p>## Details</p> <p>The WS control-plane path enforces role/scope checks centrally before dispatching methods. For non-admin operators, this includes required method scopes such as `operator.read` for `models.list`.</p> <p>The HTTP compatibility path for `/v1/models` performs bearer authorization and then returns model metadata; it does not apply an equivalent scope check.</p> <p>As reproduced, a caller with only `operator.approvals` can:</p> <p>1. connect successfully, 2. fail `models.list` over WS with `missing scope: operator.read`, 3. fetch `/v1/models` over HTTP with status 200 and model data.</p> <p>This is a cross-surface authorization inconsistency where the stricter WS policy can be bypassed via HTTP.</p> <p>## Impact</p> <p>- Callers lacking `operator.read` can still enumerate gateway model metadata through HTTP compatibility routes. - Breaks scope model consistency between WS RPC and HTTP surfaces. - Weakens least-privilege expectations for operators granted non-read scopes…</p> <p><strong>Affected:</strong> npm: openclaw</p> <p>&gt; Fixed in OpenClaw 2026.3.24, the current shipping release.</p> <p>## Summary</p> <p>The OpenAI-compatible HTTP endpoint `/v1/models` accepts bearer auth but does not enforce operator method scopes.</p> <p>In contrast, the WebSocket RPC path enforces `operator.read` for `models.list`.</p> <p>A caller connected with `operator.approvals` (no read scope) is rejected for `models.list` (`missing scope: operator.read`) but can still enumerate model metadata through HTTP `/v1/models`.</p> <p>Confirmed on current `main` at commit `06de515b6c42816b62ec752e1c221cab67b38501`.</p> <p>## Details</p> <p>The WS control-plane path enforces role/scope checks centrally before dispatching methods. For non-admin operators, this includes required method scopes such as `operator.read` for `models.list`.</p> <p>The HTTP compatibility path for `/v1/models` performs bearer authorization and then returns model metadata; it does not apply an equivalent scope check.</p> <p>As reproduced, a caller with only `operator.approvals` can:</p> <p>1. connect successfully, 2. fail `models.list` over WS with `missing scope: operator.read`, 3. fetch `/v1/models` over HTTP with status 200 and model data.</p> <p>This is a cross-surface authorization inconsistency where the stricter WS policy can be bypassed via HTTP.</p> <p>## Impact</p> <p>- Callers lacking `operator.read` can still enumerate gateway model metadata through HTTP compatibility routes. - Breaks scope model consistency between WS RPC and HTTP surfaces. - Weakens least-privilege expectations for operators granted non-read scopes…</p> https://cve.radiocsirt.org/vuln/ghsa-68f8-9mhj-h2mp https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1065 <p>Ein Angreifer kann mehrere Schwachstellen in OpenClaw ausnutzen, um Administratorrechte zu erlangen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten offenzulegen oder zu manipulieren oder andere, nicht näher spezifizierte Angriffe durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in OpenClaw ausnutzen, um Administratorrechte zu erlangen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten offenzulegen oder zu manipulieren oder andere, nicht näher spezifizierte Angriffe durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1065