Executive brief
Claw Orchestrator is a tool used to manage and orchestrate AI sessions and API requests. A security flaw in its embedded server allows anyone with network access to the application to bypass authentication if a specific security token is not manually configured. An attacker could exploit this to take control of active sessions, steal sensitive session history, or make unauthorized and potentially costly AI model requests.
Technical details
A missing authentication vulnerability (CWE-306) exists in the EmbeddedServer function within src/embedded-server.ts of Enderfga claw-orchestrator. The application defaults the internal authToken to null if the OPENCLAW_SERVER_TOKEN environment variable is missing, and the server only enforces Bearer Token validation if a token is explicitly configured. A remote, unauthenticated attacker can exploit this to access critical API endpoints, allowing them to list, create, or stop sessions, and retrieve sensitive session history. The issue is resolved in version 3.5.6, which introduces automatic token generation and mandatory authentication by default.
Affected products
- Enderfga claw-orchestrator <= 3.5.5
Timeline
- 2026-05-11: disclosed: Issue reported on GitHub repository
- 2026-05-11: patched: Fix committed to main branch
- 2026-06-01: advisory: GitHub Advisory and CVE published