Junglewise Threat Intelligence

CVE-2026-8305: OpenClaw BlueBubbles authentication bypass and SSRF

CVE-2026-8305 · Severity: high · CVSS 7.3 · Published 2026-05-11

Technologies: Openclaw. Vendors: Openclaw.

Executive brief

OpenClaw, a personal AI assistant, contains a critical security flaw in its BlueBubbles extension used for messaging integration. An attacker can bypass authentication to send unauthorized commands to the AI agent or steal administrative credentials. This could lead to a total takeover of the assistant and the host system it runs on.

Technical details

A critical vulnerability chain exists in the BlueBubbles extension of OpenClaw (formerly ClawdBot) due to improper authentication in 'extensions/bluebubbles/src/monitor.ts'. The flaw stems from two issues: first, a type-juggling error where an uninitialized password variable defaults to 'undefined', allowing authentication via a literal 'Bearer undefined' token; second, an insecure 'loopback trust' that bypasses shared-secret verification for requests originating from 127.0.0.1 (common in reverse-proxy setups). An unauthenticated remote attacker can exploit this to inject malicious events into the AI agent's input stream. Furthermore, by manipulating the 'serverUrl' parameter, an attacker can trigger a Server-Side Request Forgery (SSRF) to leak administrative passwords in cleartext. This can ultimately lead to Remote Command Execution (RCE) through prompt injection into the autonomous agent.

Affected products

  • OpenClaw OpenClaw (formerly ClawdBot) up to 2026.1.24

Timeline

  • 2026-01-27: disclosed: Initial discovery and private report to maintainer.
  • 2026-02-14: patched: Vulnerability addressed in version 2026.2.12.
  • 2026-04-22: other: Full public disclosure by researcher.
  • 2026-05-11: advisory: CVE-2026-8305 published.

References

Related threats