Openclaw cli: OpenClaw Chutes manual OAuth state validation bypass can cause credential substitution (CVE-2026-28477)

The manual Chutes OAuth login flow in OpenClaw CLI versions >=2026.1.29 and <2026.2.14 accepts attacker-controlled callback input without proper OAuth CSRF state validation. This allows an attacker who can trick a user into pasting malicious OAuth callback data to cause credential substitution by having OpenClaw exchange an attacker-obtained authorization code and persist tokens for an incorrect account. The automatic local callback flow remains secure as it validates state in the local HTTP callback handler. The vulnerability is fixed by requiring the full redirect URL with both code and state parameters, validating the state against the expected value, and rejecting code-only pastes.

An attacker who can convince a user to paste attacker-controlled OAuth callback data during the manual login prompt can cause OpenClaw to exchange an authorization code obtained by the attacker and persist tokens for the wrong Chutes account. This results in credential substitution, potentially allowing unauthorized access to the victim's Chutes account within OpenClaw. The automatic local callback flow is not vulnerable.

A patch is available and should be applied. The fix requires the manual OAuth flow to validate the full redirect URL including the state parameter and reject incomplete inputs. Users should upgrade to OpenClaw CLI version 2026.2.14 or later to mitigate this vulnerability.