N/A

CVSS Score

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

GHSA-2ww6-868g-2c56

GHSA-2ww6-868g-2c56: OpenClaw Vulnerable to HTML injection via unvalidated image MIME type in data-URL interpolation

Summary

The HTML session exporter (src/auto-reply/reply/export-html/template.js) interpolates img.mimeType directly into <img src="data:..."> attributes without validation or escaping. A crafted mimeType value (e.g., x" onerror="alert(1)) can break out of the attribute context and execute arbitrary JavaScript.

Impact

An attacker who can control image entries in session data (via crafted tool results or session manipulation) can achieve XSS when the exported HTML is opened. The precondition is tighter than the main XSS finding (requires image content blocks with a malicious mimeType), but exploitation is straightforward.

Affected components

src/auto-reply/reply/export-html/template.js — line 1032 (tool result images), line 1306 (user message images)

Reproduction

Craft a session entry with an image content block where mimeType is set to image/png" onerror="alert(document.domain)
Export the session to HTML
Open the exported HTML — the injected onerror fires

Remediation

Added sanitizeImageMimeType() helper that validates mimeType against a whitelist of known image MIME types
Falls back to application/octet-stream for unrecognized values, preventing attribute breakout

Fix

https://github.com/openclaw/openclaw/pull/24140

(GitHub Advisory)

Miggo Vulnerability Database

→

GHSA-2ww6-868g-2c56

GHSA-2ww6-868g-2c56:

N/A

CVSS Score

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
openclaw	npm	< 2026.2.23	2026.2.23

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The analysis began by examining the provided reference URLs. The initial commit URL provided in the vulnerability details was found to be for a different, though related, XSS vulnerability. By inspecting the pull request URL (https://github.com/openclaw/openclaw/pull/24140), the correct commit (d93d22fc48443b8dcc9544ff93fdcba42b0eff49) that patches the described vulnerability was identified.

The analysis of this commit's diff revealed changes in src/auto-reply/reply/export-html/template.js. Specifically, a new function, sanitizeImageMimeType, was introduced to validate image MIME types against a safe list. This new function was then applied in two key locations where <img> tags were being generated using data: URLs.

For images related to tool results, the code was changed from ...<img src="data:${img.mimeType};... to ...<img src="data:${sanitizeImageMimeType(img.mimeType)};....
For images within user messages, a similar change was made.

The vulnerable function was identified as renderEntry, as it is responsible for processing and rendering different types of session entries, including the ones containing the vulnerable image-rendering logic. The vulnerability's root cause is the direct interpolation of unvalidated user-controllable data (img.mimeType) into an HTML attribute, creating a classic stored Cross-Site Scripting (XSS) vector. An attacker who can control the session data (e.g., by crafting a tool that returns a malicious image object) can inject script code that will execute when someone views the exported HTML session log.

Vulnerable functions

renderEntry

src/auto-reply/reply/export-html/template.js

The function `renderEntry` processes session entries to generate HTML. When rendering entries containing images, such as tool outputs, it constructs `<img>` tags. The vulnerability existed because the `img.mimeType` value was directly embedded into the `src` attribute without sanitization. This allowed an attacker to inject arbitrary HTML attributes, like `onerror`, by crafting a malicious MIME type string (e.g., `image/png\" onerror=\"alert(1)`), leading to a stored XSS vulnerability when the exported HTML is viewed.

renderEntry

src/auto-reply/reply/export-html/template.js

The function `renderEntry` is also responsible for rendering user messages within a session. When a message includes images, the function constructs `<img>` tags. Similar to the tool image vulnerability, it directly used the `img.mimeType` value in the `src` attribute. This allowed for an HTML injection vulnerability, where a crafted MIME type could be used to inject malicious attributes and execute script code (XSS) in the context of the user viewing the exported HTML file.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.

N/A

-

Basic Information

Basic Information

Concerned about an active attack path?

GHSA-2ww6-868g-2c56: OpenClaw Vulnerable to HTML injection via unvalidated image MIME type in data-URL interpolation

Summary

Impact

Affected components

Reproduction

Remediation

Fix

GHSA-2ww6-868g-2c56:

N/A

-

Basic Information

Basic Information

Is this CVE running in your environment?

Technical Details

Technical Details

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

Vulnerability IntelligenceMiggo AI

Unlock WAF rules for this CVE

WAF Protection Rules

WAF Rule

Reasoning

GHSA-2ww6-868g-2c56: OpenClaw Vulnerable to HTML injection via unvalidated image MIME type in data-URL interpolation

Summary

Impact

Affected components

Reproduction

Remediation

Fix

N/A

N/A

Basic Information

Basic Information

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

Technical Details

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI