7.1

CVSS Score

4.0

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2026-42433

CVE-2026-42433: OpenClaw < 2026.4.10 - Unauthorized Matrix Profile Config Persistence Access via operator.write Message Tools

OpenClaw before 2026.4.10 contains an authorization bypass vulnerability allowing operator.write message-tool paths to access Matrix profile persistence requiring admin-level authority. Attackers can exploit insufficient access controls to mutate persistent profile configuration through non-owner message-tool runs.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2026-42433

CVE-2026-42433:

7.1

CVSS Score

4.0

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
openclaw	npm	< 2026.4.10	2026.4.10

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability exists in the openclaw matrix extension, where matrix profile updates could be performed by non-owner users due to a missing authorization check. The root cause is in the matrixMessageActions.handleAction function within extensions/matrix/src/actions.ts, which processed the set-profile action without verifying if the sender had the necessary owner privileges. This allowed any user with access to the operator.write message tool to modify the Matrix profile configuration, an action that should be restricted to administrators.

The patch addresses this by introducing a crucial check for ctx.senderIsOwner within the handleAction function. If a non-owner attempts to use set-profile, the system now throws a ToolAuthorizationError. As a defense-in-depth measure, the matrixMessageActions.describeMessageTool function was also updated to hide the set-profile action from non-owner users entirely, preventing them from discovering it. The fix required propagating the senderIsOwner status from the initial gateway request down to the action handlers, which is why numerous files were modified, but the core vulnerability is remediated in extensions/matrix/src/actions.ts.

Vulnerable functions

matrixMessageActions.handleAction

extensions/matrix/src/actions.ts

This function handles message tool actions. The vulnerability lies in the fact that before the patch, it did not check if the sender had owner privileges before executing the 'set-profile' action. This allowed any user to modify the Matrix profile configuration. The patch adds a check to ensure only owners can perform this action.

matrixMessageActions.describeMessageTool

extensions/matrix/src/actions.ts

This function is responsible for discovering which message tool actions are available to a user. Before the patch, it would advertise the 'set-profile' action to any user as long as the 'profile' feature was gated on, without checking for owner privileges. This improperly exposed a privileged action to unprivileged users. The patch ensures the action is only listed for owners.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.