8.4

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

GHSA-g55j-c2v4-pjcg

GHSA-g55j-c2v4-pjcg: OpenClaw vulnerable to Unauthenticated Local RCE via WebSocket config.apply

Summary

An unauthenticated local client could use the Gateway WebSocket API to write config via config.apply and set unsafe cliPath values that were later used for command discovery, enabling command injection as the gateway user.

Impact

A local process on the same machine could execute arbitrary commands as the gateway process user.

Details

config.apply accepted raw JSON and wrote it to disk after schema validation.
cliPath values were not constrained to safe executable names/paths.
Command discovery used a shell invocation when resolving executables.

Mitigation

Upgrade to a patched release. If projects cannot upgrade immediately, set gateway.auth and avoid custom cliPath values.

(GitHub Advisory)

Miggo Vulnerability Database

→

GHSA-g55j-c2v4-pjcg

GHSA-g55j-c2v4-pjcg:

8.4

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
openclaw	npm	< 2026.1.20	2026.1.20

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability allowed an unauthenticated local attacker to execute arbitrary code by sending a malicious configuration through the config.apply WebSocket endpoint. The root cause was that the server did not strictly validate the configuration, allowing an attacker to inject an unsafe cliPath value, which was later used for command execution.

The analysis of the commits between the vulnerable and patched versions revealed that the fix involved enforcing strict schema validation. The primary evidence was found in commit d1e9490f95e0474e41d3718a2a44268a2d33128d, where the Zod schemas for the configuration were updated to be strict, rejecting any unknown properties. This prevents the injection of malicious fields like cliPath.

The vulnerable function is the handler for the config.apply WebSocket message. While the function itself is not directly visible in the patch, its existence is confirmed by the vulnerability description, and the fix is clearly visible in the validation logic it uses. As a defense-in-depth measure, the ensureConfigReady function was also updated to prevent the application from starting with an invalid configuration.

Additionally, commit daceeaa24c044dcffec038bc2ce6c0d4fedb4664 improved the error reporting for validation failures, further confirming the focus on stricter validation as the solution.

Vulnerable functions

config.apply

src/gateway/server.impl.ts

The `config.apply` WebSocket method was vulnerable to an unauthenticated remote code execution. An attacker could send a specially crafted JSON payload to this endpoint to modify the server's configuration. The validation of the configuration was not strict enough and allowed unknown properties, including a `cliPath` that could be set to an arbitrary command. This command would then be executed by the server. The fix was to enforce strict schema validation, which prevents any unknown properties from being added to the configuration.

ensureConfigReady

src/cli/program/config-guard.ts

This function is not directly vulnerable but was modified as a defense-in-depth mitigation. It is responsible for checking the validity of the configuration file at startup. Before the patch, it was possible for the application to start with an invalid or malicious configuration. The patch modified this function to exit immediately if the configuration is invalid, preventing the execution of any potentially malicious code specified in the config.

formatValidationErrors

src/gateway/protocol/index.ts

This function is part of the validation process for incoming WebSocket messages. While not directly vulnerable, its modification is part of the overall fix. The improved error messages help in debugging issues related to strict schema validation, which was the core of the fix for the RCE vulnerability. It indicates that the server is now more stringent about the data it accepts.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.

8.4

-

Basic Information

Basic Information

Concerned about an active attack path?

GHSA-g55j-c2v4-pjcg: OpenClaw vulnerable to Unauthenticated Local RCE via WebSocket config.apply

Summary

Impact

Details

Mitigation

GHSA-g55j-c2v4-pjcg:

8.4

-

Basic Information

Basic Information

Is this CVE running in your environment?

Technical Details

Technical Details

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

Vulnerability IntelligenceMiggo AI

Unlock WAF rules for this CVE

WAF Protection Rules

WAF Rule

Reasoning

GHSA-g55j-c2v4-pjcg: OpenClaw vulnerable to Unauthenticated Local RCE via WebSocket config.apply

Summary

Impact

Details

Mitigation

Basic Information

Basic Information

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

Technical Details

8.4

8.4

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI