Openclaw cli: OpenClaw: Agent hook events could enqueue trusted system events from unsanitized external input (CVE-2026-43534)

The Openclaw CLI (npm package) prior to version 2026.4.10 has a vulnerability (CVE-2026-43534) where agent hook dispatch can convert externally supplied hook metadata into trusted system events without proper sanitization. This flaw allows untrusted input to be processed as if it originated from a trusted source, potentially leading to privilege escalation or unauthorized actions within the agent. The fix involves sanitizing hook names and marking agent hook system events as untrusted before enqueueing them. The vulnerability was patched in commit e3a845bde5b54f4f1e742d0a51ba9860f9619b29 and released starting with version 2026.4.10.

This vulnerability allows an attacker to inject untrusted input into the agent as higher-trust system events, which could lead to unauthorized actions or compromise of the agent's integrity. The CVSS score is 9.1 (critical), indicating high impact on confidentiality and integrity without requiring privileges or user interaction.

Users should upgrade to Openclaw CLI version 2026.4.10 or later to remediate this vulnerability. The fix is included starting with version 2026.4.10, and the latest release 2026.4.14 contains the patch. No additional mitigation steps are required once the upgrade is applied.