7.5

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

GHSA-6mgf-v5j7-45cr

GHSA-6mgf-v5j7-45cr: OpenClaw: fetch-guard forwards custom authorization headers across cross-origin redirects

OpenClaw's fetchWithSsrFGuard(...) followed cross-origin redirects while preserving arbitrary caller-supplied headers except for a narrow denylist (Authorization, Proxy-Authorization, Cookie, Cookie2). This allowed custom authorization headers such as X-Api-Key, Private-Token, and similar sensitive headers to be forwarded to a different origin after a redirect.

The fix switches cross-origin redirect handling from a narrow sensitive-header denylist to a safe-header allowlist, so only benign headers such as content negotiation and cache validators survive an origin change.

Affected Packages / Versions

Package: openclaw (npm)
Affected versions: <= 2026.3.2
Patched version: 2026.3.7
Latest published npm version at patch time: 2026.3.2

Impact

A remote service that could trigger a redirect across origins could receive custom authorization credentials attached by OpenClaw callers. This can expose API keys, bearer-style custom headers, or private token headers intended only for the original destination.

Fix Commit(s)

46715371b0612a6f9114dffd1466941ac476cef5

Verification

pnpm check passed
pnpm test:fast passed
Focused redirect regression tests passed
pnpm exec vitest run --config vitest.gateway.config.ts still has unrelated current-main failures in src/gateway/server-channels.test.ts and src/gateway/server-methods/agents-mutate.test.ts

Release Process Note

npm 2026.3.7 was published on March 8, 2026. This advisory is fixed in the released package.

Thanks @Rickidevs for reporting.

(GitHub Advisory)

Miggo Vulnerability Database

→

GHSA-6mgf-v5j7-45cr

GHSA-6mgf-v5j7-45cr:

7.5

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
openclaw	npm	<= 2026.3.2	2026.3.7

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability lies in how OpenClaw's fetchWithSsrFGuard function handles headers during cross-origin redirects. The analysis of the provided patch commit 46715371b0612a6f9114dffd1466941ac476cef5 reveals the root cause. The file src/infra/net/fetch-guard.ts contains the core logic.

Previously, the function stripSensitiveHeadersForCrossOriginRedirect used a denylist (CROSS_ORIGIN_REDIRECT_SENSITIVE_HEADERS) to remove a small, fixed set of headers (Authorization, Proxy-Authorization, Cookie, Cookie2) before following a redirect to a different origin. This approach was flawed because it failed to account for custom, non-standard authorization headers like X-Api-Key or Private-Token. As a result, if a request using such a header was redirected to a different origin, these sensitive headers would be leaked to the new, potentially malicious, origin.

The patch corrects this by replacing the denylist with an allowlist (CROSS_ORIGIN_REDIRECT_SAFE_HEADERS). The stripSensitiveHeadersForCrossOriginRedirect function was modified to only preserve a predefined set of safe headers (e.g., Accept, Content-Type, User-Agent) during cross-origin redirects, effectively preventing any potentially sensitive or custom headers from being forwarded.

The primary entry point for this vulnerable behavior, as stated in the advisory, is fetchWithSsrFGuard. Therefore, both fetchWithSsrFGuard and its helper stripSensitiveHeadersForCrossOriginRedirect are identified as the key functions that would appear in a runtime profile when this vulnerability is triggered.

Vulnerable functions

stripSensitiveHeadersForCrossOriginRedirect

src/infra/net/fetch-guard.ts

This function was responsible for stripping headers before a cross-origin redirect. It used a small denylist, allowing sensitive custom headers like `X-Api-Key` to be forwarded to a different origin, leading to credential leakage. The patch changes this to an allowlist of safe headers.

fetchWithSsrFGuard

src/infra/net/fetch-guard.ts

This is the main function that performs the fetch operation. It is responsible for handling redirects and, prior to the patch, it would insecurely forward sensitive headers to a new origin by calling the vulnerable `stripSensitiveHeadersForCrossOriginRedirect` function.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.

7.5

-

Basic Information

Basic Information

Concerned about an active attack path?

GHSA-6mgf-v5j7-45cr: OpenClaw: fetch-guard forwards custom authorization headers across cross-origin redirects

Affected Packages / Versions

Impact

Fix Commit(s)

Verification

Release Process Note

GHSA-6mgf-v5j7-45cr:

7.5

-

Basic Information

Basic Information

Is this CVE running in your environment?

Technical Details

Technical Details

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

Vulnerability IntelligenceMiggo AI

Unlock WAF rules for this CVE

WAF Protection Rules

WAF Rule

Reasoning

7.5

7.5

GHSA-6mgf-v5j7-45cr: OpenClaw: fetch-guard forwards custom authorization headers across cross-origin redirects

Affected Packages / Versions

Impact

Fix Commit(s)

Verification

Release Process Note

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

Technical Details

Basic Information

Basic Information

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI