N/A

CVSS Score

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

GHSA-h2v7-xc88-xx8c

GHSA-h2v7-xc88-xx8c: OpenClaw: `/phone arm`/`/phone disarm` Bypasses `operator.admin` Scope Check for External Channels

Summary

/phone arm//phone disarm Bypasses operator.admin Scope Check for External Channels

Current Maintainer Triage

Status: open
Normalized severity: medium
Assessment: Maintainers accepted this issue, fixed it in aa66ae1fc797d3298cc409ed2c5da69a89950a45 on 2026-03-27, and that fix shipped in v2026.3.28, so normalize it as a fixed released draft rather than a close-by-trust-model call.

Affected Packages / Versions

Package: openclaw (npm)
Latest published npm version: 2026.3.31
Vulnerable version range: <=2026.3.24
Patched versions: >= 2026.3.28
First stable tag containing the fix: v2026.3.28

Fix Commit(s)

aa66ae1fc797d3298cc409ed2c5da69a89950a45 — 2026-03-27T20:35:42Z

Release Process Note

The fix is already present in released version 2026.3.28.
This draft looks ready for final maintainer disposition or publication, not additional code-fix work.

Thanks @AntAISecurityLab for reporting.

(GitHub Advisory)

Miggo Vulnerability Database

→

GHSA-h2v7-xc88-xx8c

GHSA-h2v7-xc88-xx8c:

N/A

CVSS Score

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
openclaw	npm	<= 2026.3.24	2026.3.28

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability stems from an improper authorization check in two separate command handlers within the OpenClaw application. The patch aa66ae1fc797d3298cc409ed2c5da69a89950a45 reveals that for both the /phone and /voice commands, a critical security check was incorrectly scoped. The code was intended to ensure that only users with operator.admin privileges could perform sensitive actions like arming/disarming the phone or setting the voice. However, this check was only enforced if the command originated from the webchat channel (ctx.channel === "webchat"). This meant that any user interacting with the system through an external channel (e.g., Telegram, Slack) could bypass this check and execute these administrative commands. The fix removes the channel-specific condition, making the operator.admin scope check universal for these commands, thereby closing the security hole.

Vulnerable functions

definePluginEntry.chat.command.handler

extensions/phone-control/index.ts

The command handler for the `/phone` command, specifically for the 'arm' and 'disarm' actions, incorrectly checked for authorization. The `operator.admin` scope was only enforced for requests coming from the 'webchat' channel, allowing unauthenticated users on other channels to arm or disarm the phone system.

definePluginEntry.chat.command.handler

extensions/talk-voice/index.ts

The command handler for the `/voice` command, specifically for the 'set' action, had a flawed authorization check. The check for the `operator.admin` scope was only performed for requests from the 'webchat' channel. This allowed users on external channels to modify the voice configuration without the required permissions.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.