N/A

CVSS Score

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

GHSA-4f8g-77mw-3rxc

GHSA-4f8g-77mw-3rxc: OpenClaw: Gateway plugin HTTP `auth: gateway` widens identity-bearing `operator.read` requests into runtime `operator.write`

Impact

Gateway plugin HTTP auth: gateway widens identity-bearing operator.read requests into runtime operator.write.

Plugin HTTP routes using gateway auth could receive runtime write scopes even when the upstream trusted-proxy request only declared read.

OpenClaw is a user-controlled local assistant. This advisory is scoped to the OpenClaw trust model and does not assume a multi-tenant service boundary.

Affected Packages / Versions

Package: openclaw (npm)
Affected versions: 2026.1.29
Patched versions: 2026.4.8

Fix

The issue was fixed on main and is available in the patched npm version listed above. The verified fixed tree is commit d7c3210cd6f5fdfdc1beff4c9541673e814354d5.

Verification

The fix was re-checked against main before publication, including targeted regression tests for the affected security boundary.

Credits

Thanks @smaeljaish771 for reporting.

(GitHub Advisory)

Miggo Vulnerability Database

→

GHSA-4f8g-77mw-3rxc

GHSA-4f8g-77mw-3rxc:

N/A

CVSS Score

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
openclaw	npm	< 2026.4.8	2026.4.8

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The analysis started by examining the provided commit d7c3210cd6f5fdfdc1beff4c9541673e814354d5, which is the official fix for the vulnerability. The commit modifies the fetchWithSsrFGuard function in src/infra/net/fetch-guard.ts. The change involves moving the DNS pinning logic (resolvePinnedHostnameWithPolicy) to be conditional, specifically skipping it when a trusted environment proxy is configured. The vulnerability description mentions that operator.read requests are widened to operator.write in the context of gateway plugins. The fetchWithSsrFGuard function is a low-level networking function likely used by these plugins. The patch indicates that the unconditional DNS pinning was the root cause of the vulnerability. By performing DNS resolution before deciding to use the proxy, the application might have bypassed security controls enforced by the proxy, leading to the privilege escalation. Therefore, the fetchWithSsrFGuard function is identified as the vulnerable function because its logic was flawed, and modifying it was necessary to patch the vulnerability.

Vulnerable functions

fetchWithSsrFGuard

src/infra/net/fetch-guard.ts

The vulnerability is in the `fetchWithSsrFGuard` function, which handles outbound HTTP requests with SSRF protection. Before the patch, the function performed DNS pinning before checking for a trusted proxy configuration. This could cause the DNS resolution to bypass the proxy. The advisory states this leads to a privilege escalation where a read-only scope is widened to a write scope. The fix ensures that DNS pinning is skipped when a trusted proxy is used, delegating the entire request handling, including DNS, to the proxy, thus preventing the privilege escalation.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.