Executive brief
OpenClaw is an AI automation platform that accepts webhook events from services like Slack and Zalo. In affected versions, when administrators rotate webhook secrets, the old secrets continue to work briefly during a stale-secret window, allowing someone with a revoked credential to send events after the operator expected revocation. The impact is limited to organizations with the webhook feature enabled and depends on whether untrusted external parties can reach the webhook endpoint.
Technical details
This vulnerability is a session expiration / credential revocation bypass (CWE-613) affecting OpenClaw's webhook secret reloading mechanism. When the secrets.reload function is invoked to rotate Slack and Zalo webhook secrets, the previous secrets are not immediately invalidated; instead, they remain accepted during a stale-secret window. An attacker who previously obtained a webhook secret can exploit this window to deliver unauthorized webhook events even after the operator intended to revoke it. The vulnerability requires the webhook feature to be enabled and reachable, and practical impact depends on whether lower-trust input can reach the affected endpoint. The fix is available in OpenClaw version 2026.4.22 and later. Affected versions are 2026.4.21 and earlier. As mitigation, administrators should restart the affected channel runtime after rotating webhook secrets until they upgrade.
Affected products
- OpenClaw openclaw <= 2026.4.21
Timeline
- 2026-07-02: disclosed: Advisory published
- 2026-04-22: patched: First stable patched version released