GHSA-6x2m-hqfw-hvpj OpenClaw: Node exec approvals could be replayed across nodes

Q: Which versions are affected by GHSA-6x2m-hqfw-hvpj?

2 open source packages ship an affected version, including openclaw.

Q: Is GHSA-6x2m-hqfw-hvpj being exploited?

There is no known exploitation of GHSA-6x2m-hqfw-hvpj in the wild and no public exploit code.

Q: How do I fix GHSA-6x2m-hqfw-hvpj?

Upgrade openclaw to 2026.2.23 or later.

Not scored Published 2 Mar 2026

Attackers can replay operator approvals to execute commands on unintended nodes within a fleet, requiring an upgrade to OpenClaw.

Exploited in the wild: Not known
Login needed: An administrator
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: Available

What is GHSA-6x2m-hqfw-hvpj?

GHSA-6x2m-hqfw-hvpj is a vulnerability in openclaw, published on 2 Mar 2026. An attacker needs administrator access to exploit it, and only if a user opens a file or follows a link.

Official description

Summary

exec.approval requests for host=node were not explicitly bound to the target nodeId, so an approval intended for one node could be replayed for a different node under the same operator-controlled gateway fleet.

Impact

An operator approval for a system.run request could be reused across nodes if the request payload did not carry node identity through approval and execution checks.

Affected Packages / Versions

Package: openclaw (npm)
Affected: <= 2026.2.22-2
Fixed: 2026.2.23 (released)

Mitigation

Upgrade to 2026.2.23 or later once published.

Fix Details

The fix requires and persists nodeId for host=node approval requests and rejects execution when the approving node binding does not match the invoking node.

Fix Commit(s)

4a3f8438e527ac371a67fe7ac68a287f0dbe6063

Release Process Note

patched_versions is pre-set to the released version (2026.2.23). This advisory now reflects released fix version 2026.2.23.

OpenClaw thanks @tdjackey for reporting.

Which versions are affected by GHSA-6x2m-hqfw-hvpj?