Executive brief
OpenClaw is a platform used for managing webhooks and automated workflows. A security flaw was found where the system failed to properly restrict how certain session keys are handled when using templates. This could allow an attacker to bypass security controls intended to isolate different webhook routes, potentially leading to unauthorized data routing or manipulation of automated tasks.
Technical details
A vulnerability in OpenClaw's gateway component (prior to version 2026.4.20) allows for an authorization bypass of webhook routing isolation. The root cause is that sessionKey values rendered via hook mapping templates were not subject to the same security checks as request-supplied session keys. Specifically, an attacker can use templated hook mappings to influence session keys even when the 'hooks.allowRequestSessionKey' opt-in restriction is disabled. This allows an attacker to bypass intended routing isolation controls. The issue is fixed in version 2026.4.20 by enforcing the same prefix policy and opt-in checks on template-rendered keys as on externally supplied input.
Affected products
- OpenClaw openclaw < 2026.4.20
Timeline
- 2026-04-21: patched: Fix commit 5275d00 pushed to repository
- 2026-05-11: disclosed: Initial advisory publication
- 2026-05-18: advisory: Advisory updated and marked as duplicate of GHSA-2xcp-x87w-q377