Miggo at BlackHat 2026!
Easily map the attack path and prioritize which CVEs are a threat to your organization
Miggo AIGenerate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| openclaw | npm | < 2026.4.8 | 2026.4.8 |
Miggo AIRoot Cause AnalysisThe vulnerability allows a previously paired node to reconnect with elevated privileges, bypassing the intended 'operator.admin' scope requirement. The provided patch, commit d7c3210cd6f5fdfdc1beff4c9541673e814354d5, modifies the fetchWithSsrFGuard function in src/infra/net/fetch-guard.ts. The change adjusts the DNS pinning logic. Specifically, it moves the DNS resolution and pinning inside a conditional block, so that it is skipped when a trusted environment proxy is configured. Before the patch, the function would always attempt to resolve and pin the hostname, even when a proxy was in use. This likely created a condition where the connection logic would fail or behave insecurely in a proxy environment, allowing a reconnecting node to be misidentified and granted broader permissions than it should have. The function fetchWithSsrFGuard is therefore the location of the vulnerability, as its incorrect handling of network requests in a proxy environment is the root cause of the privilege escalation.
