7.5

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2026-26316

CVE-2026-26316: OpenClaw has BlueBubbles webhook auth bypass via loopback proxy trust

OpenClaw is a personal AI assistant. Prior to 2026.2.13, the optional BlueBubbles iMessage channel plugin could accept webhook requests as authenticated based only on the TCP peer address being loopback (127.0.0.1, ::1, ::ffff:127.0.0.1) even when the configured webhook secret was missing or incorrect. This does not affect the default iMessage integration unless BlueBubbles is installed and enabled. Version 2026.2.13 contains a patch. Other mitigations include setting a non-empty BlueBubbles webhook password and avoiding deployments where a public-facing reverse proxy forwards to a loopback-bound Gateway without strong upstream authentication.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2026-26316

CVE-2026-26316:

7.5

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
openclaw	npm	< 2026.2.13	2026.2.13
@openclaw/bluebubbles	npm	< 2026.2.13	2026.2.13

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability lies in the handleBlueBubblesWebhookRequest function, which is responsible for processing incoming webhooks for the BlueBubbles iMessage integration. The analysis of the provided patches, specifically commit f836c385ffc746cb954e8ee409f99d079bfdcd2f, reveals the exact code that caused the vulnerability. The removed lines show a check that explicitly allowed requests from loopback addresses to be processed without proper authentication. This created a significant security hole, as any process on the same machine (including a reverse proxy forwarding external requests) could impersonate an authenticated service.

The subsequent defense-in-depth commit, 743f4b28495cdeb0d5bf76f6ebf4af01f6a02e5a, further confirms that this area of the code was the source of the problem. It introduces a more sophisticated check, isDirectLocalLoopbackRequest, to distinguish between genuine direct loopback requests and those that are proxied, hardening the authentication logic. Therefore, during an exploit scenario on a vulnerable version, the handleBlueBubblesWebhookRequest function would be the primary function appearing in a runtime profile as it processes the malicious, unauthenticated webhook.

Vulnerable functions

handleBlueBubblesWebhookRequest

extensions/bluebubbles/src/monitor.ts

The function `handleBlueBubblesWebhookRequest` in `extensions/bluebubbles/src/monitor.ts` was vulnerable to an authentication bypass. It incorrectly trusted requests originating from loopback IP addresses (`127.0.0.1`, `::1`, `::ffff:127.0.0.1`) and treated them as authenticated, even if no valid secret was provided. An attacker could exploit this by using a same-host reverse proxy or an SSRF vulnerability to send a request that appears to come from a loopback address, thereby bypassing authentication and injecting arbitrary webhook events.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.