N/A

CVSS Score

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

GHSA-68v4-hmwv-f43h

GHSA-68v4-hmwv-f43h: OpenClaw: Media download follows cross-origin redirects with Authorization headers intact

Summary

Media download follows cross-origin redirects with Authorization headers intact

Current Maintainer Triage

Status: open
Normalized severity: medium
Assessment: Shipped v2026.3.28 media downloads forwarded Authorization across cross-origin redirects, a real in-scope credential-leak class that fits medium.

Affected Packages / Versions

Package: openclaw (npm)
Latest published npm version: 2026.3.31
Vulnerable version range: <=2026.3.28
Patched versions: >= 2026.3.31
First stable tag containing the fix: v2026.3.31

Fix Commit(s)

e704323ff388ed21f6963f9b8e0b1b8dfaaabc5f — 2026-03-31T19:57:42+09:00

OpenClaw thanks @AntAISecurityLab for reporting.

(GitHub Advisory)

Miggo Vulnerability Database

→

GHSA-68v4-hmwv-f43h

GHSA-68v4-hmwv-f43h:

N/A

CVSS Score

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
openclaw	npm	<= 2026.3.28	2026.3.31

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability, GHSA-68v4-hmwv-f43h, involves the improper handling of sensitive headers during cross-origin HTTP redirects in the openclaw package. When a media download was initiated from a URL that redirected to a different origin, headers such as Authorization and Cookie were forwarded to the new destination, risking credential leakage.

The root cause of this vulnerability is located in the downloadToFile function in src/media/store.ts. This function, which handles the download and redirect logic, used a faulty utility function, retainSafeHeadersForCrossOriginRedirectHeaders, to sanitize headers. This utility, located in src/infra/net/fetch-guard.ts, failed to correctly strip sensitive headers before the redirect request was made.

The patch rectifies this issue by refactoring the header-stripping logic into a new file (src/infra/net/redirect-headers.ts) with a correct implementation and updating the downloadToFile function to use this new utility. During exploitation, a runtime profile would show saveMediaSource calling downloadToFile, which in the vulnerable version would then call the flawed retainSafeHeadersForCrossOriginRedirectHeaders function, leading to the credential leak.

Vulnerable functions

downloadToFile

src/media/store.ts

This function recursively downloads a file and handles HTTP redirects. When a redirect to a different origin occurred, it was supposed to strip sensitive headers (like 'Authorization') before following the redirect. It called a flawed utility function to perform this stripping, which resulted in sensitive headers being forwarded to the cross-origin destination.

saveMediaSource

src/media/store.ts

This is the main exported function for saving media from a URL. It initiates the download process by calling the vulnerable `downloadToFile` function. During exploitation, this function would be at the top of the call stack that leads to the credential leak.

retainSafeHeadersForCrossOriginRedirectHeaders

src/infra/net/fetch-guard.ts

This utility function was responsible for filtering headers and retaining only a safe list for cross-origin requests. Its implementation was flawed, causing it to not properly strip sensitive headers like 'Authorization', leading to credential leakage when used in a redirect context. The patch removes its original implementation and replaces it.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.