Junglewise Threat Intelligence

CVE-2026-28448: OpenClaw Twitch plugin authorization bypass in allowFrom access control

CVE-2026-28448 · Severity: low · CVSS 3.1 · Published 2026-02-17

Technologies: Openclaw. Vendors: Openclaw.

Executive brief

OpenClaw is an AI agent platform that integrates with chat platforms like Twitch. The optional Twitch plugin contains an access control flaw where the allowFrom allowlist is not properly enforced, permitting any Twitch user to invoke the bot and trigger agent actions. Operators who configured this feature to restrict bot access to specific users are exposed to unauthorized agent invocation, potentially leading to unintended actions, resource exhaustion, or cost overruns.

Technical details

The vulnerability exists in the checkTwitchAccessControl() function in extensions/twitch/src/access-control.ts. When allowFrom was configured, the function returned allowed: true for allowlisted members but did not return allowed: false for non-members, causing execution to fall through to a default allow rule. Additionally, if allowedRoles was unset or empty, the function returned allowed: true by default regardless of the allowFrom configuration. This authorization bypass requires network access (Twitch chat mention) and no authentication or privileges. An attacker who can mention the bot in Twitch chat can reach the agent dispatch pipeline and trigger bot actions. The fix was implemented in commit 8c7901c and is available in version 2026.2.1 or later.

Affected products

  • OpenClaw openclaw >= 2026.1.29, < 2026.2.1

Timeline

  • 2026-02-14: disclosed
  • 2026-02-17: patched: Version 2026.2.1 released with fix
  • 2026-02-17: advisory: GHSA-33rq-m5x2-fvgf published

References