N/A

CVSS Score

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

GHSA-7rcp-mxpq-72pj

GHSA-7rcp-mxpq-72pj: OpenClaw Chutes manual OAuth state validation bypass can cause credential substitution

Summary

The manual Chutes OAuth login flow could accept attacker-controlled callback input in a way that bypassed OAuth CSRF state validation, potentially resulting in credential substitution.

Impact

If an attacker can convince a user to paste attacker-provided OAuth callback data during the manual login prompt, OpenClaw may exchange an attacker-obtained authorization code and persist tokens for the wrong Chutes account.

The automatic local callback flow is not affected (it validates state in the local HTTP callback handler).

Affected Packages / Versions

openclaw (npm): <= 2026.2.13 when using the manual Chutes OAuth login flow.

Fix

The manual flow now requires the full redirect URL (must include code and state), validates the returned state against the expected value, and rejects code-only pastes.

Fix Commit(s)

a99ad11a4107ba8eac58f54a3c1a8a0cf5686f47

Thanks @aether-ai-agent for reporting.

(GitHub Advisory)

Miggo Vulnerability Database

→

GHSA-7rcp-mxpq-72pj

GHSA-7rcp-mxpq-72pj:

N/A

CVSS Score

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
openclaw	npm	< 2026.2.14	2026.2.14

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability lies in the manual OAuth flow for Chutes, where the application could bypass state validation. The root cause is in the parseOAuthCallbackInput function within src/agents/chutes-oauth.ts. Previously, this function would accept a bare authorization code pasted by the user. When it received just the code, it would skip the crucial step of validating the state parameter returned by the OAuth provider. The state parameter is a CSRF token designed to prevent credential substitution attacks. By not validating it, an attacker could generate an authorization code for their own account, trick a victim into pasting it into the OpenClaw application, and have the application link the attacker's Chutes account to the victim's OpenClaw session.

The patch addresses this by removing the code path that accepts a bare authorization code. Now, parseOAuthCallbackInput requires the full redirect URL, from which it extracts both the code and the state. It then correctly validates that the received state matches the expected state that was generated at the beginning of the login flow.

The function loginChutes in src/commands/chutes-oauth.ts is the entry point for this vulnerable manual flow. It prompts the user for the callback data and calls parseOAuthCallbackInput. Therefore, both loginChutes and parseOAuthCallbackInput are critical functions to monitor for this vulnerability.

Vulnerable functions

parseOAuthCallbackInput

src/agents/chutes-oauth.ts

This function was vulnerable because it allowed a user to provide just an authorization code. In this scenario, the function would not validate the OAuth `state` parameter, which is a crucial part of CSRF protection in OAuth flows. An attacker could trick a user into pasting an authorization code obtained by the attacker, leading to the application associating the victim's session with the attacker's account. The fix removes the logic that allows accepting a bare authorization code, now requiring the full redirect URL so that the `state` can be properly validated.

loginChutes

src/commands/chutes-oauth.ts

This function orchestrates the manual OAuth login flow for Chutes. It prompts the user for input and passes it to the vulnerable `parseOAuthCallbackInput` function. Therefore, `loginChutes` is a key function that would appear in a runtime profile during the exploitation of this vulnerability.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.

N/A

-

Basic Information

Basic Information

Concerned about an active attack path?

GHSA-7rcp-mxpq-72pj: OpenClaw Chutes manual OAuth state validation bypass can cause credential substitution

Summary

Impact

Affected Packages / Versions

Fix

Fix Commit(s)

GHSA-7rcp-mxpq-72pj:

N/A

-

Basic Information

Basic Information

Is this CVE running in your environment?

Technical Details

Technical Details

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

Vulnerability IntelligenceMiggo AI

Unlock WAF rules for this CVE

WAF Protection Rules

WAF Rule

Reasoning

Basic Information

Basic Information

N/A

N/A

Technical Details

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

GHSA-7rcp-mxpq-72pj: OpenClaw Chutes manual OAuth state validation bypass can cause credential substitution

Summary

Impact

Affected Packages / Versions

Fix

Fix Commit(s)

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI