6

CVSS Score

4.0

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

GHSA-82rm-qcfx-2v78

GHSA-82rm-qcfx-2v78: Duplicate Advisory: OpenClaw: Delivery queue recovery could lose group tool-policy context for media replay

Duplicate Advisory

This advisory has been withdrawn because it is a duplicate of GHSA-r77c-2cmr-7p47. This link is maintained to preserve external references.

Original Description

OpenClaw versions 2026.4.10 before 2026.4.14 fail to persist session context during delivery queue recovery for media replay. Attackers can exploit recovered queued outbound media to bypass group tool policy enforcement and weaken channel media restrictions after service restart or recovery.

(GitHub Advisory)

Miggo Vulnerability Database

→

GHSA-82rm-qcfx-2v78

GHSA-82rm-qcfx-2v78:

6

CVSS Score

4.0

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
openclaw	npm	>= 2026.4.10, < 2026.4.14	2026.4.14

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability stems from the failure to persist the session context of outbound messages in the delivery queue. This session context is crucial for enforcing security policies, such as group tool policies and media restrictions. When OpenClaw restarts or recovers, it processes this queue to replay any pending outbound messages. The analysis of the patch commit 48aae82bbc19ba8b0741e61a08063eb0d1df464e reveals the exact points of failure.

The function deliverOutboundPayloads in src/infra/outbound/deliver.ts is the initial point where the session context was available but not passed down to the queuing mechanism. The core of the issue lies in enqueueDelivery in src/infra/outbound/delivery-queue-storage.ts, which was responsible for writing the message to the queue but omitted the session context. Consequently, upon recovery, the buildRecoveryDeliverParams function in src/infra/outbound/delivery-queue-recovery.ts had no session context to retrieve and apply to the replayed message. This allowed a previously queued message to be sent without the original security constraints, leading to a bypass of channel media restrictions. The fix involved passing the session context through this entire chain, ensuring it is persisted and available upon recovery.

Vulnerable functions

deliverOutboundPayloads

src/infra/outbound/deliver.ts

This function is the entry point for dispatching outbound payloads. In the vulnerable version, it did not pass the 'session' context when calling 'enqueueDelivery'. This omission meant that for any delivery that was queued, the security context required for policy enforcement was lost.

enqueueDelivery

src/infra/outbound/delivery-queue-storage.ts

This function is responsible for serializing and persisting a delivery job to the queue. The vulnerability lies here, as the function did not include the 'session' context in the data written to storage. This is the root cause of the information loss.

buildRecoveryDeliverParams

src/infra/outbound/delivery-queue-recovery.ts

This function is executed during service recovery to rebuild queued delivery jobs. In its vulnerable state, it did not read the 'session' context from the queued entry (because it was never saved) and therefore could not apply it to the recovered delivery. This allowed for the bypass of security policies on replayed media.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.