Executive brief
ClawHub is a backend application that serves API requests with rate limiting. The vulnerability allows unauthenticated users to drain the shared quota pool used by all anonymous API callers, causing denial or degradation of service for unrelated visitors. Additionally, when a legacy trust setting is enabled without proper edge authentication, attackers can forge caller identity headers to select arbitrary quota limits and bypass rate limiting entirely.
Technical details
The API backend fails to bind anonymous HTTP requests to individual trusted identities, instead sharing a single default quota allowance across all unauthenticated callers (CWE-770). When the TRUST_FORWARDED_IPS option is enabled without an authenticated edge/proxy, clients can supply arbitrary forwarded IP headers to select quota identities, bypassing per-caller rate limits. The vulnerability is fixed in revision 8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650 (PR #3684), where direct anonymous calls are redirected to the public API origin without consuming quota and forged identity assertions return HTTP 401.
Affected products
- OpenClaw ClawHub cbfee7343ddc867316dd9b3de6fa8856730f9f41 and earlier (exact range not fully established); fixed in 8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650
Timeline
- 2026-09-11: disclosed: Fixed and deployed to clawhub.ai
- 2026-09-26: advisory: CVE-2026-100600 published