Most recent entries from all

BREW-openclaw-cli-CVE-2026-35655 — OpenClaw's Conflicting Tool Identity Hints Bypass Dangerous-Tool Prompting

Affected: Homebrew: openclaw-cli

## Summary ACP permission resolution trusted conflicting tool identity hints from rawInput and metadata, which could suppress dangerous-tool prompting.

## Affected Packages / Versions - Package: `openclaw` (npm) - Affected: < 2026.3.22 - Fixed: >= 2026.3.22 - Latest released tag checked: `v2026.3.23-2` (`630f1479c44f78484dfa21bb407cbe6f171dac87`) - Latest published npm version checked: `2026.3.23-2`

## Fix Commit(s) - `e4c61723cd2d530680cc61789311d464ab8cdf60`

## Release Status The fix shipped in `v2026.3.22` and remains present in `v2026.3.23` and `v2026.3.23-2`.

## Code-Level Confirmation - src/acp/client.ts now fails closed when meta, rawInput, and title tool identities conflict instead of trusting spoofable raw input. - src/acp/client.test.ts ships regressions for conflicting tool identity hints and dangerous-tool prompting.

OpenClaw thanks @zpbrent for reporting.

EUVD-2026-329532

fkie_cve-2026-35655

OpenClaw before 2026.3.22 contains an identity spoofing vulnerability in ACP permission resolution that trusts conflicting tool identity hints from rawInput and metadata. Attackers can spoof tool identities through rawInput parameters to suppress dangerous-tool prompting and bypass security restrictions.

GHSA-74wf-h43j-vvmj — OpenClaw's Conflicting Tool Identity Hints Bypass Dangerous-Tool Prompting

Affected: npm: openclaw

## Summary ACP permission resolution trusted conflicting tool identity hints from rawInput and metadata, which could suppress dangerous-tool prompting.

## Fix Commit(s) - `e4c61723cd2d530680cc61789311d464ab8cdf60`

## Release Status The fix shipped in `v2026.3.22` and remains present in `v2026.3.23` and `v2026.3.23-2`.

OpenClaw thanks @zpbrent for reporting.

WID-SEC-W-2026-0856 — OpenClaw: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in OpenClaw ausnutzen, um beliebigen Code auszuführen, erweiterte Berechtigungen – sogar Administratorrechte – zu erlangen, Daten zu manipulieren, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen oder andere, nicht näher spezifizierte Angriffe durchzuführen.