N/A

CVSS Score

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

GHSA-5mx2-2mgw-x8rm

GHSA-5mx2-2mgw-x8rm: OpenClaw: BlueBubbles beta plugin webhook auth hardening (remove passwordless fallback)

Summary

BlueBubbles webhook auth in the optional beta iMessage plugin allowed a passwordless fallback path. In some reverse-proxy/local routing setups, this could allow unauthenticated webhook events.

Affected Component and Scope

Component: extensions/bluebubbles webhook handler
Scope: only deployments using the optional BlueBubbles plugin where webhook password auth was not configured for incoming webhook events

Affected Packages / Versions

Package: openclaw/openclaw (npm)
Latest published npm version at triage time (2026-02-21): 2026.2.19-2
Affected structured range: <=2026.2.19-2
Fixed on main; planned patched release: 2026.2.21 (>=2026.2.21)

Details

The vulnerable implementation had multiple auth branches, including a passwordless fallback with loopback/proxy heuristics.

The fix now uses one authentication codepath:

inbound webhook token/guid must match channels.bluebubbles.password
webhook target matching is consolidated to shared plugin-sdk logic
BlueBubbles config validation now requires password when serverUrl is set

Impact

BlueBubbles is an optional beta iMessage plugin, and onboarding/channel-add flows already require a password. Practical exposure is mainly custom/manual configurations that omitted webhook password authentication.

Remediation

Upgrade to a release that includes this patch (>=2026.2.21, planned).
Ensure BlueBubbles webhook delivery includes a matching password (?password=<password> or x-password).

Fix Commit(s)

6b2f2811dc623e5faaf2f76afaa9279637174590
283029bdea23164ab7482b320cb420d1b90df806

Release Process Note

patched_versions is pre-set to the planned next release (2026.2.21) so once npm release is out, advisory publish can proceed without additional ticket edits.

OpenClaw thanks @zpbrent for reporting.

(GitHub Advisory)

Miggo Vulnerability Database

→

GHSA-5mx2-2mgw-x8rm

GHSA-5mx2-2mgw-x8rm:

N/A

CVSS Score

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
openclaw/openclaw	npm	< 2026.2.21	2026.2.21

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability existed in the webhook handler for the optional BlueBubbles iMessage plugin. The core of the issue was a passwordless authentication fallback mechanism intended for local loopback requests. The analysis of the commits, particularly 6b2f2811dc623e5faaf2f76afaa9279637174590, reveals the vulnerable logic.

The function handleBlueBubblesWebhookRequest in extensions/bluebubbles/src/monitor.ts was the main entry point for processing webhooks. It previously used a helper function, isDirectLocalLoopbackRequest, to check if a request originated locally and without proxy forwarding headers. If this check passed and no password-authenticated target was found, the request was processed without authentication. This created a security hole where a request could be crafted to appear as a safe local request (e.g., through a misconfigured reverse proxy), thus bypassing authentication entirely.

The patch remediates this by completely removing the isDirectLocalLoopbackRequest function and the associated passwordless fallback logic within handleBlueBubblesWebhookRequest. The updated code strictly requires that every webhook request provides a valid token that matches a configured password. A subsequent commit, 283029bdea23164ab7482b320cb420d1b90df806, further hardens the system by adding a configuration validation rule that makes the webhook password a required field if the BlueBubbles server URL is configured, preventing insecure deployments from the start.

Vulnerable functions

handleBlueBubblesWebhookRequest

extensions/bluebubbles/src/monitor.ts

This function was responsible for handling incoming webhooks. The vulnerability lies in the logic that determined which requests required authentication. Specifically, the code would fall back to allowing passwordless targets (`passwordlessTargets`) if the request was identified as a direct local loopback request by `isDirectLocalLoopbackRequest(req)`. This check could be bypassed in certain reverse-proxy configurations, allowing an unauthenticated attacker to send webhook events.

isDirectLocalLoopbackRequest

extensions/bluebubbles/src/monitor.ts

This function, which was entirely removed by the patch, contained the flawed logic to determine if a request was a 'safe' loopback request that could bypass password authentication. It checked the remote address and host header, but its check for proxy forwarding headers was insufficient, allowing attackers to bypass authentication by sending requests through misconfigured reverse proxies that did not set the expected forwarding headers.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.

N/A

-

Basic Information

Basic Information

Concerned about an active attack path?

GHSA-5mx2-2mgw-x8rm: OpenClaw: BlueBubbles beta plugin webhook auth hardening (remove passwordless fallback)

Summary

Affected Component and Scope

Affected Packages / Versions

Details

Impact

Remediation

Fix Commit(s)

Release Process Note

GHSA-5mx2-2mgw-x8rm:

N/A

-

Basic Information

Basic Information

Is this CVE running in your environment?

Technical Details

Technical Details

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

Vulnerability IntelligenceMiggo AI

Unlock WAF rules for this CVE

WAF Protection Rules

WAF Rule

Reasoning

Technical Details

N/A

N/A

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

Basic Information

Basic Information

GHSA-5mx2-2mgw-x8rm: OpenClaw: BlueBubbles beta plugin webhook auth hardening (remove passwordless fallback)

Summary

Affected Component and Scope

Affected Packages / Versions

Details

Impact

Remediation

Fix Commit(s)

Release Process Note

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI