7.2

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

GHSA-v6c6-vqqg-w888

GHSA-v6c6-vqqg-w888: OpenClaw affected by potential code execution via unsafe hook module path handling in Gateway

Summary

OpenClaw Gateway supports hook mappings with optional JavaScript/TypeScript transform modules. In affected versions, the gateway did not sufficiently constrain configured module paths before passing them to dynamic import(). Under some configurations, a user who can modify gateway configuration could cause the gateway process to load and execute an unintended local module.

Impact

Potential code execution in the OpenClaw gateway Node.js process.

This requires access that can modify gateway configuration (for example via the gateway config endpoints). Treat such access as high privilege.

Affected Packages / Versions

npm package: openclaw
Affected: >= 2026.1.5 and <= 2026.2.13

Patched Versions

>= 2026.2.14

Fix Commit(s)

a0361b8ba959e8506dc79d638b6e6a00d12887e4 (restrict hook transform module loading)
35c0e66ed057f1a9f7ad2515fdcef516bd6584ce (harden hooks module loading)

Mitigation

Upgrade to 2026.2.14 or newer.
Avoid exposing gateway configuration endpoints to untrusted networks.
Review config for unsafe values:
- hooks.mappings[].transform.module
- hooks.internal.handlers[].module

Thanks @222n5 for reporting.

(GitHub Advisory)

Miggo Vulnerability Database

→

GHSA-v6c6-vqqg-w888

GHSA-v6c6-vqqg-w888:

7.2

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
openclaw	npm	>= 2026.1.5, < 2026.2.14	2026.2.14

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability exists due to unsafe handling of module paths provided in the OpenClaw gateway configuration. The application dynamically imports JavaScript/TypeScript modules for hooks and transforms, but in affected versions, it failed to properly sanitize and restrict the file paths for these modules. The core of the issue lies in two areas of the configuration: hooks.mappings[].transform.module and hooks.internal.handlers[].module.

An attacker with the ability to modify the gateway's configuration could specify a malicious path for these modules. The functions resolveHookMappings and normalizeHookMapping in src/gateway/hooks-mapping.ts processed the transform.module path without preventing path traversal (e.g., ../) or absolute paths. Similarly, the loadInternalHooks function in src/hooks/loader.ts handled the internal.handlers[].module path insecurely, allowing modules to be loaded from outside the intended workspace directory.

This lack of path validation meant that the import() function could be pointed to an arbitrary file on the local filesystem, resulting in remote code execution within the security context of the OpenClaw gateway process. The patches address this by introducing strict path validation, ensuring that all loaded modules are confined within designated, safe directories (~/.openclaw/hooks/transforms and the workspace directory, respectively), and rejecting any attempts at path traversal or the use of absolute paths.

Vulnerable functions

resolveHookMappings

src/gateway/hooks-mapping.ts

This function is responsible for resolving hook mappings from the configuration. In the vulnerable version, it used the `resolvePath` function, which did not properly sanitize the `hooks.transformsDir` configuration value. This allowed for path traversal, enabling an attacker with configuration access to specify a directory outside of the intended `hooks/transforms` directory, from which a malicious module could be loaded.

normalizeHookMapping

src/gateway/hooks-mapping.ts

This function, called by `resolveHookMappings`, constructs the final path to the transform module. It used the insecure `resolvePath` function on the `mapping.transform.module` value from the configuration. This was the direct cause of the path traversal vulnerability for `hooks.mappings`, as it allowed an attacker to specify a module path like `../malicious.js` to escape the intended directory and execute arbitrary code.

loadInternalHooks

src/hooks/loader.ts

This function is responsible for loading modules for internal hooks based on the `hooks.internal.handlers[].module` configuration. The vulnerable version allowed absolute paths and performed path resolution relative to the current working directory without any validation. This allowed an attacker with configuration access to load any file on the system as a module, leading to arbitrary code execution.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.

7.2

-

Basic Information

Basic Information

Concerned about an active attack path?

GHSA-v6c6-vqqg-w888: OpenClaw affected by potential code execution via unsafe hook module path handling in Gateway

Summary

Impact

Affected Packages / Versions

Patched Versions

Fix Commit(s)

Mitigation

GHSA-v6c6-vqqg-w888:

7.2

-

Basic Information

Basic Information

Is this CVE running in your environment?

Technical Details

Technical Details

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

Vulnerability IntelligenceMiggo AI

Unlock WAF rules for this CVE

WAF Protection Rules

WAF Rule

Reasoning

Technical Details

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

GHSA-v6c6-vqqg-w888: OpenClaw affected by potential code execution via unsafe hook module path handling in Gateway

Summary

Impact

Affected Packages / Versions

Patched Versions

Fix Commit(s)

Mitigation

Basic Information

Basic Information

7.2

7.2

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI