N/A

CVSS Score

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

GHSA-792q-qw95-f446

GHSA-792q-qw95-f446: OpenClaw's Signal reaction-only status events could, in limited cases, be enqueued before access checks

Summary

In a narrow Signal reaction-notification path, reaction-only inbound events could enqueue a status event before sender access checks were applied.

Affected Packages / Versions

Package: openclaw (npm)
Affected: <= 2026.2.24 (latest published at patch time)
Fixed: 2026.2.25

Details

In the affected flow (src/signal/monitor/event-handler.ts), reaction-only handling could return after enqueueSystemEvent(...) before DM/group authorization checks were evaluated for that sender.

This behavior was limited to reaction-only inbound events with reaction notifications enabled. In that case, a sender not authorized for normal DM flow could still queue a Signal reaction status line for that session.

The fix applies shared DM/group access checks before reaction notification enqueue. Pairing behavior for normal DM messages is unchanged.

Impact

Limited to Signal reaction-only inbound events.
Could add an unauthorized reaction status line to agent context for affected sessions.
Did not directly enable normal DM delivery or direct host command execution.

Fix Commit(s)

2aa7842adeedef423be7ce283a9144b9f1a0a669

Release Process Note

patched_versions is pre-set to 2026.2.25 so once npm release is out, advisory publish can proceed directly.

OpenClaw thanks @tdjackey for reporting.

(GitHub Advisory)

Miggo Vulnerability Database

→

GHSA-792q-qw95-f446

GHSA-792q-qw95-f446:

N/A

CVSS Score

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
openclaw	npm	<= 2026.2.24	2026.2.25

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability lies in the createSignalEventHandler function located in src/signal/monitor/event-handler.ts. This function is responsible for creating a handler for Signal messages. The analysis of the patch commit 2aa7842adeedef423be7ce283a9144b9f1a0a669 reveals that, prior to the fix, the handler for reaction-only events would enqueue a system event via deps.enqueueSystemEvent before any access control checks were performed. This meant that a sender who was not authorized to send direct messages could still trigger a reaction notification. The patch adds an explicit authorization check using resolveDmGroupAccessDecision for reaction events, ensuring that only authorized senders can trigger these notifications. Therefore, the createSignalEventHandler function is identified as the vulnerable function because it constructs the event handler containing this logic flaw.

Vulnerable functions

createSignalEventHandler

src/signal/monitor/event-handler.ts

The `createSignalEventHandler` function returns an async function that handles incoming Signal events. In the vulnerable version, this handler processed reaction-only events and called `enqueueSystemEvent` without first performing authorization checks on the sender. This allowed an unauthorized user to inject a reaction status event into an agent's session. The patch rectifies this by introducing authorization logic using `resolveDmGroupAccessDecision` before the reaction event is processed and a system event is enqueued.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.

N/A

-

Basic Information

Basic Information

Concerned about an active attack path?

GHSA-792q-qw95-f446: OpenClaw's Signal reaction-only status events could, in limited cases, be enqueued before access checks

Summary

Affected Packages / Versions

Details

Impact

Fix Commit(s)

Release Process Note

GHSA-792q-qw95-f446:

N/A

-

Basic Information

Basic Information

Is this CVE running in your environment?

Technical Details

Technical Details

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

Vulnerability IntelligenceMiggo AI

Unlock WAF rules for this CVE

WAF Protection Rules

WAF Rule

Reasoning

GHSA-792q-qw95-f446: OpenClaw's Signal reaction-only status events could, in limited cases, be enqueued before access checks

Summary

Affected Packages / Versions

Details

Impact

Fix Commit(s)

Release Process Note

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

Technical Details

Basic Information

Basic Information

N/A

N/A

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI