Executive brief
OpenClaw, an open-source gateway and control interface, contains a security flaw where sensitive configuration data can be accessed without a password. An unauthorized person could view internal system settings and bootstrap information that should only be visible to logged-in administrators. This exposure could reveal details about the system's architecture or credentials, potentially aiding further attacks.
Technical details
An authentication bypass vulnerability exists in OpenClaw's Gateway Control UI bootstrap config endpoint (/__openclaw/control-ui-config.json). The root cause is a missing authorization check (CWE-862) that allows the endpoint to be reached without a valid Gateway token, even when gateway authentication is enabled. A remote, unauthenticated attacker can exploit this by sending a direct request to the bootstrap config route to retrieve sensitive configuration metadata. This information is intended only for authenticated sessions. The vulnerability is addressed in version 2026.4.22 by routing the bootstrap config request through the standard Gateway read-authentication path.
Affected products
- OpenClaw openclaw < 2026.4.22
Timeline
- 2026-04-22: patched: Fix committed to repository
- 2026-04-23: advisory: GitHub Security Advisory published
- 2026-05-11: disclosed: CVE published and NVD record created