N/A

CVSS Score

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

GHSA-2rgf-hm63-5qph

GHSA-2rgf-hm63-5qph: OpenClaw improperly parses X-Forwarded-For behind trusted proxies allows client IP spoofing in security decisions

Summary

OpenClaw used left-most X-Forwarded-For values when requests came from configured trusted proxies. In proxy chains that append/preserve header values, this could let attacker-controlled header content influence security decisions tied to client IP.

Affected Packages / Versions

Package: openclaw (npm)
Affected: <= 2026.2.19-2
Patched: 2026.2.21 (planned next release)

Impact

Possible client-IP spoofing in security-sensitive paths (for example auth rate-limit identity and local/private classification) for deployments behind trusted proxies with non-recommended forwarding behavior.

Scope Note

OpenClaw docs recommend reverse proxies overwrite (not append/preserve) inbound forwarding headers. This condition reduces severity.

Fix Commit(s)

07039dc089e51589a213ec0d16f8d6f2cd871fa1
8877bfd11ec7760b115b2d0d7500a45da2749747

Release Process Note

patched_versions is pre-set to the planned next release (2026.2.21). After npm release is out, publish this advisory.

OpenClaw thanks @AnthonyDiSanti for reporting.

(GitHub Advisory)

Miggo Vulnerability Database

→

GHSA-2rgf-hm63-5qph

GHSA-2rgf-hm63-5qph:

N/A

CVSS Score

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
openclaw	npm	<= 2026.2.19-2	2026.2.21

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability exists in how the OpenClaw gateway resolves a client's IP address when operating behind a trusted reverse proxy. The core of the issue is in the parseForwardedForClientIp function within src/gateway/net.ts. The original code incorrectly trusted the left-most value in the X-Forwarded-For header, an value which is easily controlled by a remote client. An attacker could prepend a chosen IP address to this header to bypass IP-based security controls like rate limiting or access restrictions.

The initial patch (07039dc...) attempted a fix by taking the right-most value, but this was still insufficient for scenarios with multiple proxies. The second, more complete patch (8877bfd...) correctly implements the standard algorithm for this situation: it iterates the X-Forwarded-For header from right to left, skipping any IPs that are configured as trusted proxies, and selects the first non-trusted IP as the true client address. The function resolveGatewayClientIp is the entry point for this logic and was modified to supply the necessary trustedProxies list to the parsing function. Therefore, both resolveGatewayClientIp and parseForwardedForClientIp would appear in a runtime profile during the exploitation of this vulnerability.

Vulnerable functions

parseForwardedForClientIp

src/gateway/net.ts

This function was responsible for parsing the `X-Forwarded-For` header. The vulnerable version incorrectly selected the left-most (first) IP address, which can be easily spoofed by an attacker. The fix changes the logic to correctly identify the client IP by traversing the proxy chain from right-to-left and skipping trusted proxies.

resolveGatewayClientIp

src/gateway/net.ts

This function is the main entry point for resolving a client's IP address. It was vulnerable because it called the flawed `parseForwardedForClientIp` function and did not provide it with the necessary context of trusted proxies. This led to security decisions, such as rate limiting, being based on a potentially spoofed IP address.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.

N/A

-

Basic Information

Basic Information

Concerned about an active attack path?

GHSA-2rgf-hm63-5qph: OpenClaw improperly parses X-Forwarded-For behind trusted proxies allows client IP spoofing in security decisions

Summary

Affected Packages / Versions

Impact

Scope Note

Fix Commit(s)

Release Process Note

GHSA-2rgf-hm63-5qph:

N/A

-

Basic Information

Basic Information

Is this CVE running in your environment?

Technical Details

Technical Details

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

Vulnerability IntelligenceMiggo AI

Unlock WAF rules for this CVE

WAF Protection Rules

WAF Rule

Reasoning

GHSA-2rgf-hm63-5qph: OpenClaw improperly parses X-Forwarded-For behind trusted proxies allows client IP spoofing in security decisions

Summary

Affected Packages / Versions

Impact

Scope Note

Fix Commit(s)

Release Process Note

Basic Information

Basic Information

N/A

N/A

Technical Details

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI