Executive brief
ClawHub is a platform for managing and sharing skills. Four coordinated ordinary user accounts can repeatedly report any skill—including official ones—to automatically hide them from the catalog without moderator review. An attacker could weaponize this to disrupt the availability and visibility of legitimate skills through distributed reporting.
Technical details
The skill report moderation flow fails to enforce adequate authorization controls and rate-limiting. Four distinct authenticated accounts can each file a report against a visible skill to trigger automatic hiding (moderationStatus: hidden); the reporter quota only counts reports against visible targets, allowing repetition against additional skills. The flaw was confirmed at revision cbfee7343ddc867316dd9b3de6fa8856730f9f41 and patched in revision 8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650 (PR #3681).
Affected products
- OpenClaw ClawHub up to revision cbfee7343ddc867316dd9b3de6fa8856730f9f41
Timeline
- 2026-09-11: disclosed: Fix merged in PR #3681 and deployed revision 8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650
- 2026-09-11: patched: Patched revision 8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650
- 2026-09-26: advisory: Public advisory released