Executive brief
OpenClaw is a software development tool that uses Chutes for OAuth authentication. The manual OAuth login flow in OpenClaw fails to properly validate security tokens, allowing an attacker to trick users into pasting malicious OAuth response data and hijacking their Chutes accounts. This could result in unauthorized access to an attacker's account credentials being persisted under the victim's session.
Technical details
The vulnerability is a CSRF (CWE-352) state validation bypass in OpenClaw's manual Chutes OAuth login flow. The vulnerable component fails to properly validate the OAuth state parameter when accepting user-pasted callback data during manual authentication. An attacker can craft malicious OAuth callback input containing an attacker-controlled authorization code and state, which the application accepts without proper validation. If a user can be socially engineered to paste this attacker-provided data into the manual login prompt, OpenClaw will exchange the attacker's authorization code and persist authentication tokens for the wrong account. The automatic local callback flow is not affected as it properly validates state. The fix requires the full redirect URL including both code and state, validates state against the expected value, and rejects code-only pastes. Patched in version 2026.2.14.
Affected products
- OpenClaw openclaw <= 2026.2.13
Timeline
- 2026-02-18: disclosed: Advisory published
- 2026-02-14: patched: Fix available in version 2026.2.14