Executive brief
OpenClaw is a Node.js package that manages webhook routing with security controls to restrict session-key handling. A flaw in template rendering within hook mappings allows attackers to bypass the intended session-key opt-in restriction, potentially routing webhooks to unintended destinations or exposing webhook isolation controls—even when administrators have disabled this feature.
Technical details
This is an authorization bypass (CWE-863) affecting OpenClaw's hook mapping system. Template-rendered session keys were not subject to the same restrictions as explicitly request-supplied session keys. An attacker can craft externally influenced session keys in templated hook mappings to bypass the hooks.allowRequestSessionKey opt-in requirement and existing prefix-policy validation checks. This affects webhook routing isolation but does not grant direct host code execution. The vulnerability is present in all versions prior to 2026.4.20, and is fixed by treating all externally influenced routing input—including template-rendered session keys—consistently with the opt-in and prefix-policy controls.
Affected products
- OpenClaw openclaw before 2026.4.20
Timeline
- 2026-04-21: disclosed: Public security advisory GHSA-2xcp-x87w-q377 published
- 2026-04-21: patched: Fixed in OpenClaw 2026.4.20