Executive brief
OpenClaw is a popular Node.js library used for HTTP-based orchestration and management operations. When deployed in trusted-proxy mode with identity-bearing browser sessions, the HTTP operator endpoints fail to validate the origin of requests, allowing attackers to forge cross-site requests. This could permit unauthorized execution of operator commands through a victim's authenticated browser session.
Technical details
The vulnerability is a browser-origin validation bypass (CWE-346, CWE-352) in OpenClaw's HTTP operator endpoints when operating in trusted-proxy mode. The endpoints do not properly validate the HTTP Origin or Referer headers, making them susceptible to cross-site request forgery (CSRF) attacks. The attack requires a user with an authenticated session to OpenClaw to be tricked into accessing a malicious webpage via their browser, and only affects deployments using trusted-proxy mode with identity-bearing browser authentication—not the default shared-secret HTTP operator model. The vulnerability was patched in version 2026.3.31; all versions through 2026.3.28 are affected.
Affected products
- OpenClaw openclaw <=2026.3.28
Timeline
- 2026-04-03: disclosed
- 2026-03-31: patched: Fix released in version 2026.3.31