N/A

CVSS Score

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

GHSA-r77c-2cmr-7p47

GHSA-r77c-2cmr-7p47: OpenClaw: Delivery queue recovery could lose group tool-policy context for media replay

Summary

Delivery queue recovery could lose group tool-policy context for media replay.

Affected Packages / Versions

Package: openclaw
Ecosystem: npm
Affected versions: >= 2026.4.10 < 2026.4.14
Patched versions: >= 2026.4.14

Impact

Recovered queued outbound media could be replayed without the original session context needed to enforce group tool policy, weakening channel media restrictions after restart/recovery.

Technical Details

The fix persists and replays the relevant session context with delivery queue entries so recovered media dispatch goes through the same policy checks.

Fix

The issue was fixed in #66025. The first stable tag containing the fix is v2026.4.14, and openclaw@2026.4.14 includes the fix.

Fix Commit(s)

48aae82bbc19ba8b0741e61a08063eb0d1df464e
PR: #66025

Release Process Note

Users should upgrade to openclaw 2026.4.14 or newer. The latest npm release, 2026.4.14, already includes the fix.

Credits

Thanks to @zsxsoft, with sponsorship from @KeenSecurityLab and @qclawer for reporting this issue.

(GitHub Advisory)

Miggo Vulnerability Database

→

GHSA-r77c-2cmr-7p47

GHSA-r77c-2cmr-7p47:

N/A

CVSS Score

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
openclaw	npm	>= 2026.4.10, < 2026.4.14	2026.4.14

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability lies in the loss of session context when outbound media deliveries are queued. The root cause is that the enqueueDelivery function in src/infra/outbound/delivery-queue-storage.ts did not persist the session context, which is necessary for enforcing tool policies. The deliverOutboundPayloads function in src/infra/outbound/deliver.ts failed to pass this context for queueing.

When the application restarts, the delivery queue recovery process is initiated. The buildRecoveryDeliverParams function in src/infra/outbound/delivery-queue-recovery.ts reconstructs the delivery parameters from the queued data. Since the session context was never saved, it was absent during recovery. This caused the replayed media delivery to bypass the original group tool policy checks, weakening channel media restrictions.

The patch addresses this by adding the session context to the QueuedDeliveryPayload type, persisting it in enqueueDelivery, and re-using it in buildRecoveryDeliverParams during recovery. Therefore, any runtime profile during a vulnerable operation would involve these functions, with the exploitation scenario specifically occurring during the recovery and replay of queued items.

Vulnerable functions

enqueueDelivery

src/infra/outbound/delivery-queue-storage.ts

This function is responsible for writing delivery information to a persistent queue. Before the patch, it did not include the `session` context, which contains security-relevant information for policy enforcement. This omission is the root cause of the vulnerability, as the context is lost upon queueing.

buildRecoveryDeliverParams

src/infra/outbound/delivery-queue-recovery.ts

This function is used when recovering queued deliveries after a restart. It reconstructs the parameters for the delivery. Because the `session` context was not previously stored in the queue, this function would build delivery parameters without it, leading to the bypass of media policy checks during replay of the queued media.

deliverOutboundPayloads

src/infra/outbound/deliver.ts

This function orchestrates outbound message delivery. It calls `enqueueDelivery` to persist the message for later delivery. The vulnerability existed because this function did not pass the `session` context down to `enqueueDelivery`, contributing to the loss of context needed for policy enforcement on recovery.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.

N/A

-

Basic Information

Basic Information

Concerned about an active attack path?

GHSA-r77c-2cmr-7p47: OpenClaw: Delivery queue recovery could lose group tool-policy context for media replay

Summary

Affected Packages / Versions

Impact

Technical Details

Fix

Fix Commit(s)

Release Process Note

Credits

GHSA-r77c-2cmr-7p47:

N/A

-

Basic Information

Basic Information

Is this CVE running in your environment?

Technical Details

Technical Details

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

Vulnerability IntelligenceMiggo AI

Unlock WAF rules for this CVE

WAF Protection Rules

WAF Rule

Reasoning

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

Basic Information

Basic Information

Technical Details

GHSA-r77c-2cmr-7p47: OpenClaw: Delivery queue recovery could lose group tool-policy context for media replay

Summary

Affected Packages / Versions

Impact

Technical Details

Fix

Fix Commit(s)

Release Process Note

Credits

N/A

N/A

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI