N/A

CVSS Score

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

GHSA-7g8c-cfr3-vqqr

GHSA-7g8c-cfr3-vqqr: OpenClaw: Agent hook events could enqueue trusted system events from unsanitized external input

Summary

Agent hook events could enqueue trusted system events from unsanitized external input.

Affected Packages / Versions

Package: openclaw
Ecosystem: npm
Affected versions: < 2026.4.10
Patched versions: >= 2026.4.10

Impact

Agent hook dispatch could turn externally supplied hook metadata into trusted system events, allowing untrusted input to enter the agent as higher-trust context.

Technical Details

The fix sanitizes hook names and marks agent hook system events as untrusted before enqueueing them.

Fix

The issue was fixed in #64372. The first stable tag containing the fix is v2026.4.10, and openclaw@2026.4.14 includes the fix.

Fix Commit(s)

e3a845bde5b54f4f1e742d0a51ba9860f9619b29
PR: #64372

Release Process Note

Users should upgrade to openclaw 2026.4.10 or newer. The latest npm release, 2026.4.14, already includes the fix.

Credits

Thanks to @zsxsoft, with sponsorship from @KeenSecurityLab and @qclawer for reporting this issue.

(GitHub Advisory)

Miggo Vulnerability Database

→

GHSA-7g8c-cfr3-vqqr

GHSA-7g8c-cfr3-vqqr:

N/A

CVSS Score

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
openclaw	npm	< 2026.4.10	2026.4.10

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The analysis of the provided patch commit e3a845bde5b54f4f1e742d0a51ba9860f9619b29 clearly indicates that the vulnerability is located within the dispatchAgentHook arrow function, which is defined inside the exported createGatewayHooksRequestHandler function in src/gateway/server/hooks.ts. The vulnerability is due to improper handling of externally supplied data. Specifically, the name field from the HookAgentDispatchPayload was used without sanitization to create a system event. This could be exploited by sending a crafted hook name to make the system enqueue a trusted system event. The patch addresses this by introducing two main changes inside dispatchAgentHook: 1) It sanitizes the input value.name using sanitizeInboundSystemTags. 2) It explicitly marks the system events generated from these hooks as untrusted by adding trusted: false to the enqueueSystemEvent call. The vulnerable function is identified as createGatewayHooksRequestHandler.dispatchAgentHook because this is the precise location where the untrusted input is processed and passed to a sensitive function in a trusted context.

Vulnerable functions

createGatewayHooksRequestHandler.dispatchAgentHook

src/gateway/server/hooks.ts

The `dispatchAgentHook` function within `createGatewayHooksRequestHandler` processes agent hook dispatch payloads. The vulnerability lies in the fact that it took an externally provided `name` from the payload and used it directly to construct a system event message via `enqueueSystemEvent`. These events were implicitly trusted, allowing an attacker to craft a malicious hook name (e.g., 'System: ...') that would be processed as a high-trust system event. The patch mitigates this by first sanitizing the hook name using `sanitizeInboundSystemTags` and then explicitly marking the enqueued system event as untrusted by setting the `trusted: false` property.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.

N/A

-

Basic Information

Basic Information

Concerned about an active attack path?

GHSA-7g8c-cfr3-vqqr: OpenClaw: Agent hook events could enqueue trusted system events from unsanitized external input

Summary

Affected Packages / Versions

Impact

Technical Details

Fix

Fix Commit(s)

Release Process Note

Credits

GHSA-7g8c-cfr3-vqqr:

N/A

-

Basic Information

Basic Information

Is this CVE running in your environment?

Technical Details

Technical Details

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

Vulnerability IntelligenceMiggo AI

Unlock WAF rules for this CVE

WAF Protection Rules

WAF Rule

Reasoning

Basic Information

Basic Information

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

GHSA-7g8c-cfr3-vqqr: OpenClaw: Agent hook events could enqueue trusted system events from unsanitized external input

Summary

Affected Packages / Versions

Impact

Technical Details

Fix

Fix Commit(s)

Release Process Note

Credits

N/A

N/A

Technical Details

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI