N/A

CVSS Score

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

GHSA-mhgq-xpfq-6r66

GHSA-mhgq-xpfq-6r66: OpenClaw: Unauthenticated plugin-auth HTTP routes receive operator runtime scopes

Summary

Unauthenticated plugin-auth HTTP routes receive operator runtime scopes

Current Maintainer Triage

Status: narrow
Normalized severity: medium
Assessment: v2026.3.28 still gives auth:"plugin" routes operator WRITE_SCOPE, but impact should stay limited to plugin routes that actually touch privileged runtime actions before plugin auth completes.

Affected Packages / Versions

Package: openclaw (npm)
Latest published npm version: 2026.3.31
Vulnerable version range: <=2026.3.28
Patched versions: >= 2026.3.31
First stable tag containing the fix: v2026.3.31

Fix Commit(s)

2a1db0c0f1fa375004a95ba0ef030534790a6d47 — 2026-04-01T00:20:49+09:00

OpenClaw thanks @davidluzsilva for reporting.

(GitHub Advisory)

Miggo Vulnerability Database

→

GHSA-mhgq-xpfq-6r66

GHSA-mhgq-xpfq-6r66:

N/A

CVSS Score

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
openclaw	npm	<= 2026.3.28	2026.3.31

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability allowed unauthenticated plugin HTTP routes to receive operator-level runtime scopes. The root cause was in the createPluginRouteRuntimeClient function, which was hardcoded to grant WRITE_SCOPE to all plugin routes, irrespective of their authentication requirements. This function was called by createGatewayPluginRequestHandler, the main handler for plugin HTTP requests. As a result, any plugin route using auth: 'plugin' would be given write privileges, creating a significant security risk if a plugin exposed sensitive operations through such a route. The fix involves making the scope assignment conditional. The createPluginRouteRuntimeClient function was modified to only assign WRITE_SCOPE if the route requires gateway authentication. The createGatewayPluginRequestHandler was updated to pass the authentication requirement to createPluginRouteRuntimeClient, ensuring that unauthenticated routes operate with least privilege.

Vulnerable functions

createGatewayPluginRequestHandler

src/gateway/server/plugins-http.ts

This function handles plugin HTTP requests. It was calling `createPluginRouteRuntimeClient` which unconditionally provided write scopes to the runtime client, regardless of whether the route required gateway authentication. This meant even unauthenticated 'plugin' auth routes received elevated privileges.

createPluginRouteRuntimeClient

src/gateway/server/plugins-http.ts

This function was hardcoded to create a runtime client with `WRITE_SCOPE`. This was the root cause of the vulnerability, as it did not differentiate between authenticated and unauthenticated plugin routes. The patch introduces a parameter `requiresGatewayAuth` to conditionally assign scopes, removing the `WRITE_SCOPE` for unauthenticated routes.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.