Openclaw cli: OpenClaw BlueBubbles webhook auth bypass via loopback proxy trust (CVE-2026-26316)
Description
A vulnerability in openclaw-cli's optional BlueBubbles iMessage channel plugin allows webhook authentication bypass when requests originate from loopback addresses. This occurs if the webhook secret is missing or incorrect, enabling unauthenticated webhook event injection. The issue affects versions prior to 2026.2.13 when BlueBubbles is installed and enabled. The default iMessage integration is not impacted. A fix is available in version 2026.2.13.
CVSS v3.1
Score 7.5high
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
In openclaw-cli versions before 2026.2.13, the BlueBubbles plugin accepts webhook requests as authenticated solely based on the TCP peer address being loopback (127.0.0.1, ::1, or ::ffff:127.0.0.1), even if the configured webhook secret is missing or incorrect. This allows an attacker who can send requests via loopback, including through a same-host reverse proxy or SSRF, to inject unauthorized webhook events into the system. The vulnerability does not affect the default iMessage integration unless BlueBubbles is installed and enabled. The issue is fixed in version 2026.2.13 with commits f836c385ffc746cb954e8ee409f99d079bfdcd2f and 743f4b28495cdeb0d5bf76f6ebf4af01f6a02e5a.
Potential Impact
An unauthenticated attacker able to send requests from the loopback interface or exploit SSRF to reach loopback can bypass webhook authentication in BlueBubbles, injecting unauthorized webhook events. This can lead to unauthorized actions within the agent pipeline. The default iMessage integration is not affected. The vulnerability has a CVSS score of 7.5 (high severity) with no confidentiality or availability impact but high integrity impact.
Mitigation Recommendations
A patch is available in openclaw-cli and @openclaw/bluebubbles version 2026.2.13. Users should upgrade to this version or later. Additionally, set a non-empty BlueBubbles webhook password to enforce authentication. Avoid deployment architectures where a public-facing reverse proxy forwards requests to a loopback-bound gateway without strong upstream authentication to prevent unauthorized access via loopback.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- BREW-openclaw-cli-CVE-2026-26316
- Osv Schema Version
- 1.7.3
- Ecosystems
- ["Homebrew"]
- Cvss Version
- 3.1
Threat ID: 6ac245cf12601ec6a3167fef
Added to database: 10/04/2026, 12:25:51 UTC
Last enriched: 10/04/2026, 13:14:27 UTC
Last updated: 10/04/2026, 16:08:37 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.