N/A

CVSS Score

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

GHSA-5h3f-885m-v22w

GHSA-5h3f-885m-v22w: OpenClaw: Existing WS sessions survive shared gateway token rotation

Impact

Existing WS sessions survive shared gateway token rotation.

Rotating the shared gateway token did not disconnect existing shared-token WebSocket sessions.

OpenClaw is a user-controlled local assistant. This advisory is scoped to the OpenClaw trust model and does not assume a multi-tenant service boundary.

Affected Packages / Versions

Package: openclaw (npm)
Affected versions: <= 2026.4.1
Patched versions: 2026.4.8

Fix

The issue was fixed on main and is available in the patched npm version listed above. The verified fixed tree is commit d7c3210cd6f5fdfdc1beff4c9541673e814354d5.

Verification

The fix was re-checked against main before publication, including targeted regression tests for the affected security boundary.

Credits

Thanks @kexinoh of Tencent zhuque Lab (https://github.com/Tencent/AI-Infra-Guard) for reporting.

(GitHub Advisory)

Miggo Vulnerability Database

→

GHSA-5h3f-885m-v22w

GHSA-5h3f-885m-v22w:

N/A

CVSS Score

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
openclaw	npm	< 2026.4.8	2026.4.8

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The security advisory GHSA-5h3f-885m-v22w describes a vulnerability where existing WebSocket sessions are not terminated after a shared gateway token is rotated. The advisory explicitly points to commit d7c3210cd6f5fdfdc1beff4c9541673e814354d5 as the fix. This commit modifies a single function, fetchWithSsrFGuard, in the file src/infra/net/fetch-guard.ts.

The code change itself relates to DNS pinning and network proxy configurations. It alters the logic to skip DNS pinning for outbound requests when a trusted environment proxy is detected. While this seems unrelated to WebSocket session management at first glance, the connection can be inferred. The process of terminating sessions upon token rotation likely requires the server to make an outbound HTTP request (e.g., to an internal API or to trigger a disconnect). This request is handled by the fetchWithSsrFGuard function.

Before the patch, the function's incorrect DNS pinning logic could cause this critical outbound request to fail in environments that rely on a proxy for name resolution. The failure of this request would lead to the session termination process failing silently, resulting in the observed vulnerability where old sessions persist. The patch corrects this by ensuring the request can be dispatched correctly through the proxy, allowing the session termination logic to complete as expected. Thus, fetchWithSsrFGuard is the function whose flawed behavior is central to this vulnerability.

Vulnerable functions

fetchWithSsrFGuard

src/infra/net/fetch-guard.ts

The vulnerability involves WebSocket sessions not being terminated upon token rotation. This session termination process likely relies on an outbound HTTP request made via the `fetchWithSsrFGuard` function. Prior to the patch, this function's DNS pinning logic could cause the request to fail in environments using a proxy. This failure would silently prevent the session termination from occurring. The patch corrects the logic to skip DNS pinning when a trusted proxy is used, ensuring the session termination request can complete successfully. Therefore, the flawed logic within `fetchWithSsrFGuard` is the root cause of the vulnerability

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.