Executive brief
OpenClaw is a gateway platform that integrates with messaging services like Slack and Zalo via webhook secrets. A flaw in the secrets reload function fails to immediately invalidate old webhook credentials, leaving a window where attackers with previously-revoked secrets can still deliver events. While the impact window is typically brief, this could allow unauthorized webhook events to be processed during the transition period after credential rotation.
Technical details
This vulnerability is a session/credential expiration bypass (CWE-613) affecting OpenClaw versions before 2026.4.22. The root cause is insufficient validation during the secrets.reload operation for Slack and Zalo webhook integrations; old secrets remain active during a stale-secret window rather than being immediately revoked. An authenticated attacker or privileged user with knowledge of a previously-rotated webhook secret can exploit this by sending webhook events during the grace period between secret rotation and actual invalidation. The vulnerability requires network access, low privilege level (authenticated user), but no special attack complexity. The impact is integrity-focused: attackers can inject or manipulate webhook events that the system still accepts as valid. Patched in version 2026.4.22; mitigation includes restarting the affected channel runtime after webhook secret rotation until the patch can be applied.
Affected products
- OpenClaw OpenClaw < 2026.4.22
Timeline
- 2026-05-28: disclosed: Original advisory GHSA-275c-xpvc-jgfw published
- 2026-06-13: disclosed: Duplicate advisory GHSA-p68j-q8j9-jwf5 published
- 2026-04-22: patched: Patched version 2026.4.22 released