Openclaw cli: OpenClaw Twitch allowFrom is not enforced in optional plugin, unauthorized chat users can trigger agent pipeline (CVE-2026-28448)
Description
A vulnerability in the optional Twitch plugin of the OpenClaw CLI allowed unauthorized Twitch users to trigger the agent pipeline despite being excluded by the configured allowlist. This occurred because the 'allowFrom' user ID list was not properly enforced when 'allowedRoles' was unset or empty, resulting in an authorization bypass. The issue affects OpenClaw versions from 2026.1.29 up to but not including 2026.2.1. A fix is available in version 2026.2.1.
CVSS v3.1
Score 7.3high
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The OpenClaw CLI Twitch plugin's access control logic failed to enforce the 'allowFrom' user ID allowlist as a strict gate. Specifically, if 'allowedRoles' was unset or empty, the access control function defaulted to allowing access, enabling any Twitch user who mentioned the bot to trigger the agent dispatch pipeline. This bypasses intended authorization restrictions for operators relying on 'allowFrom'. The vulnerability affects OpenClaw versions >=2026.1.29 and <2026.2.1 and was fixed in version 2026.2.1.
Potential Impact
This vulnerability allows unauthorized Twitch users, not included in the configured 'allowFrom' list, to invoke the bot's agent dispatch pipeline. This could lead to unintended actions or responses and potentially cause resource or cost exhaustion depending on the bot's configuration and usage. The impact is limited to deployments that have installed and enabled the Twitch plugin.
Mitigation Recommendations
Upgrade OpenClaw to version 2026.2.1 or later, which contains the official fix for this vulnerability. No other mitigations are indicated or necessary once the upgrade is applied.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- BREW-openclaw-cli-CVE-2026-28448
- Osv Schema Version
- 1.7.3
- Ecosystems
- ["Homebrew"]
- Cvss Version
- 3.1
Threat ID: 6ac245dd12601ec6a31684c7
Added to database: 10/04/2026, 12:26:05 UTC
Last enriched: 10/04/2026, 13:22:51 UTC
Last updated: 10/04/2026, 16:08:37 UTC
Views: 4
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.