7.1

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

GHSA-hv93-r4j3-q65f

GHSA-hv93-r4j3-q65f: OpenClaw Hook Session Key Override Enables Targeted Cross-Session Routing

Summary

The issue is not deterministic session keys by itself. The exploitable path was accepting externally supplied sessionKey values on authenticated hook ingress, allowing a hook token holder to route messages into chosen sessions.

Affected Behavior

POST /hooks/agent accepted payload sessionKey and used it directly for session routing.
Common session-key shapes (for example agent:main:dm:<peerId>) were often derivable from known metadata, making targeted routing practical when request-level override was enabled.

Attack Preconditions

Attacker can call hook endpoints with a valid hook token.
Hook ingress allows request-selected sessionKey values.
Target session keys can be derived or guessed.

Without those preconditions, deterministic key formats alone do not provide access.

Impact

Integrity: targeted message/prompt injection into chosen sessions.
Persistence: poisoned context can affect subsequent turns when the same session key is reused.
Confidentiality impact is secondary and depends on additional weaknesses.

Affected Versions

openclaw >= 2.0.0-beta3 and < 2026.2.12

Patched Versions

openclaw >= 2026.2.12

Fix

OpenClaw now uses secure defaults for hook session routing:

POST /hooks/agent rejects payload sessionKey unless hooks.allowRequestSessionKey=true.
Added hooks.defaultSessionKey for fixed ingress routing.
Added hooks.allowedSessionKeyPrefixes to constrain explicit routing keys.
Security audit warns on unsafe hook session-routing settings.

Recommended Configuration

{
  "hooks": {
    "enabled": true,
    "token": "${OPENCLAW_HOOKS_TOKEN}",
    "defaultSessionKey": "hook:ingress",
    "allowRequestSessionKey": false,
    "allowedSessionKeyPrefixes": ["hook:"]
  }
}

Credit

Thanks @alpernae for responsible reporting.

(GitHub Advisory)

Miggo Vulnerability Database

→

GHSA-hv93-r4j3-q65f

GHSA-hv93-r4j3-q65f:

7.1

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
openclaw	npm	>= 2.0.0-beta3, < 2026.2.12	2026.2.12

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The analysis of the provided commit 113ebfd6a23c4beb8a575d48f7482593254506ec reveals fixes for multiple security vulnerabilities. The primary vulnerability from the advisory, concerning the 'Hook Session Key Override', is located in the createHooksRequestHandler function. This function improperly used a user-provided sessionKey for routing messages. While the provided patch doesn't explicitly show the fix for this session key issue, it does modify the same function, confirming its role in handling hooks.

The commit clearly patches a timing attack vulnerability (CWE-208) across three functions: createHooksRequestHandler, authorizeGatewayConnect, and verifyDeviceToken. All three were using insecure, non-constant-time comparisons for authentication tokens or passwords. The patch replaces these with a secure, constant-time comparison function (safeEqualSecret), mitigating the risk of an attacker guessing secrets via timing analysis. The identified functions are therefore vulnerable in the unpatched versions.

Vulnerable functions

createHooksRequestHandler

src/gateway/server-http.ts

This function is responsible for handling incoming webhooks. The vulnerability described in the advisory, regarding the `sessionKey` override, is located within this function's logic for the `/hooks/agent` endpoint. The function improperly trusted the `sessionKey` from the request payload, allowing an attacker to route messages to arbitrary sessions. The provided patch also fixes a separate timing attack vulnerability in this function by replacing the insecure `!==` token comparison with a constant-time comparison using `safeEqualSecret`.

authorizeGatewayConnect

src/gateway/auth.ts

This function was vulnerable to a timing attack. It used a non-constant-time comparison to validate gateway connection tokens. The patch replaces the insecure comparison with a constant-time `safeEqualSecret` function to prevent attackers from exploiting timing discrepancies to guess the token.

verifyDeviceToken

src/infra/device-pairing.ts

This function was vulnerable to a timing attack when verifying device tokens. The use of a non-constant-time comparison (`!==`) for the token could allow an attacker to gain information about the token through timing analysis. The patch mitigates this by using the constant-time `safeEqualSecret` function.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.

7.1

-

Basic Information

Basic Information

Concerned about an active attack path?

GHSA-hv93-r4j3-q65f: OpenClaw Hook Session Key Override Enables Targeted Cross-Session Routing

Summary

Affected Behavior

Attack Preconditions

Impact

Affected Versions

Patched Versions

Fix

Recommended Configuration

Credit

GHSA-hv93-r4j3-q65f:

7.1

-

Basic Information

Basic Information

Is this CVE running in your environment?

Technical Details

Technical Details

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

Vulnerability IntelligenceMiggo AI

Unlock WAF rules for this CVE

WAF Protection Rules

WAF Rule

Reasoning

GHSA-hv93-r4j3-q65f: OpenClaw Hook Session Key Override Enables Targeted Cross-Session Routing

Summary

Affected Behavior

Attack Preconditions

Impact

Affected Versions

Patched Versions

Fix

Recommended Configuration

Credit

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

Basic Information

Basic Information

7.1

7.1

Technical Details

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI