Executive brief
OpenClaw is a library used to build chat applications and integrations for Google Chat. Its webhook authentication mechanism for Google Chat add-ons incorrectly accepted requests from unauthorized add-on principals, allowing an attacker to forge webhook requests and potentially manipulate chat messages or access sensitive data within integrated chat environments.
Technical details
The vulnerability is an improper authentication verification (CWE-290, CWE-863) in the OpenClaw Google Chat webhook handler. The auth.ts module failed to properly validate that incoming webhook requests came from the expected add-on principal; it accepted requests from non-deployment add-on principals that should have been rejected. An attacker with the ability to send HTTP requests to the webhook endpoint (network attack vector) could forge requests using a different add-on principal, bypassing authentication controls. The vulnerability required low privileges (the attacker must know a valid webhook URL) and affected the confidentiality and integrity of webhook operations. The fix, shipped in version 2026.3.22, adds strict expectedAddOnPrincipal matching in auth verification and ensures only the configured appPrincipal is accepted.
Affected products
- OpenClaw openclaw < 2026.3.22
Timeline
- 2026-03-26: disclosed
- 2026-03-22: patched: Version 2026.3.22 and later contain the fix