N/A

CVSS Score

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

GHSA-49cg-279w-m73x

GHSA-49cg-279w-m73x: OpenClaw: Empty approver lists could grant explicit approval authorization

Summary

Empty approver lists could grant explicit approval authorization.

Affected Packages / Versions

Package: openclaw
Ecosystem: npm
Affected versions: < 2026.4.12
Patched versions: >= 2026.4.12

Impact

For helper-backed channels, an empty resolved approver list could be interpreted as explicit approval authorization, allowing a sender outside the normal channel authorization gate to resolve pending approvals if they knew an approval id.

Technical Details

The fix prevents empty approver lists from granting explicit approval authorization and adds regression coverage for unauthorized senders.

Fix

The issue was fixed in #65714. The first stable tag containing the fix is v2026.4.12, and openclaw@2026.4.14 includes the fix.

Fix Commit(s)

0a105c0900de701d2ee9f1abc96b017afbd0afdd
PR: #65714

Release Process Note

Users should upgrade to openclaw 2026.4.12 or newer. The latest npm release, 2026.4.14, already includes the fix.

Credits

Thanks to @anshumanbh for reporting this issue.

(GitHub Advisory)

Miggo Vulnerability Database

→

GHSA-49cg-279w-m73x

GHSA-49cg-279w-m73x:

N/A

CVSS Score

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
openclaw	npm	< 2026.4.12	2026.4.12

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability in OpenClaw allowed an unauthorized sender to approve requests if a channel's approver list was empty. This occurred because an empty list was misinterpreted as granting explicit approval, bypassing normal authorization checks.

The analysis of the fixing commit 0a105c0900de701d2ee9f1abc96b017afbd0afdd pinpoints the flawed logic:

createResolvedApproverActionAuthAdapter in src/plugin-sdk/approval-auth-helpers.ts: This function creates an authorization adapter. Its authorizeActorAction method would return a simple { authorized: true } when the approver list was empty. This undifferentiated success response was the root cause of the vulnerability.
resolveApprovalCommandAuthorization in src/infra/channel-approval-auth.ts: This function consumed the result from the adapter. It failed to distinguish between an explicit approval by a configured user and the fallback authorization from an empty list. It incorrectly flagged the latter as explicit: true.

The patch addresses this by introducing a special marker for authorizations that result from an empty approver list, terming it an "implicit same-chat fallback." The resolveApprovalCommandAuthorization function was updated to check for this marker and correctly set explicit: false in such cases, thus closing the security hole.

During an exploit, a call to handleApproveCommand would trigger this chain of vulnerable functions, leading to an unauthorized approval.

Vulnerable functions

createResolvedApproverActionAuthAdapter

src/plugin-sdk/approval-auth-helpers.ts

This function creates an authorization adapter. The vulnerability is in the `authorizeActorAction` method returned by this function. When the list of approvers was empty, this method returned `{ authorized: true }`. This was then incorrectly interpreted by consuming functions as an explicit authorization, which allowed bypassing sender authorization checks.

resolveApprovalCommandAuthorization

src/infra/channel-approval-auth.ts

This function determines if an approval command is authorized. It consumed the result from the authorization adapter and incorrectly calculated the `explicit` flag, treating an authorization with an empty approver list as explicit. The patch introduces a check `!implicitSameChatAuthorization` to correctly handle this case and prevent the bypass.

handleApproveCommand

src/auto-reply/reply/commands-approve.ts

This function handles the `/approve` command and is the entry point for triggering the vulnerability. It calls `resolveApprovalCommandAuthorization` to check for authorization. Although this function was not modified, an exploit would involve invoking it, causing it to use the flawed authorization logic.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.

N/A

-

Basic Information

Basic Information

Concerned about an active attack path?

GHSA-49cg-279w-m73x: OpenClaw: Empty approver lists could grant explicit approval authorization

Summary

Affected Packages / Versions

Impact

Technical Details

Fix

Fix Commit(s)

Release Process Note

Credits

GHSA-49cg-279w-m73x:

N/A

-

Basic Information

Basic Information

Is this CVE running in your environment?

Technical Details

Technical Details

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

Vulnerability IntelligenceMiggo AI

Unlock WAF rules for this CVE

WAF Protection Rules

WAF Rule

Reasoning

Basic Information

Basic Information

GHSA-49cg-279w-m73x: OpenClaw: Empty approver lists could grant explicit approval authorization

Summary

Affected Packages / Versions

Impact

Technical Details

Fix

Fix Commit(s)

Release Process Note

Credits

Technical Details

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

N/A

N/A

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI