Openclaw cli: OpenClaw's gateway connect could skip device identity checks when auth.token was present but not yet validated (CVE-2026-28472)
Description
OpenClaw CLI versions up to 2026.2.1 have a vulnerability in the gateway WebSocket connect handshake that allows skipping device identity checks if an auth.token is present but not validated. This could enable unauthorized clients to connect without proper device identity or pairing, potentially granting operator access depending on configuration. The issue is fixed in version 2026.2.2 by requiring validated shared-secret authentication for skipping device identity. The gateway should be restricted to trusted networks and users to mitigate risk.
CVSS v3.1
Score 9.8critical
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The OpenClaw CLI gateway WebSocket connect handshake improperly allowed bypassing device identity verification based solely on the presence of a non-empty auth.token, without validating the shared-secret authentication. This flaw exists in versions <= 2026.2.1. An attacker able to reach the gateway WebSocket and authenticate via Tailscale without a validated shared secret could connect without device identity or pairing, potentially gaining operator-level access. The fix, introduced in version 2026.2.2, enforces that skipping device identity requires validated shared-secret authentication, ensuring Tailscale-authenticated connections without validated secrets must provide device identity.
Potential Impact
Clients can connect to the OpenClaw gateway WebSocket without providing validated device identity if they present an auth.token, potentially gaining unauthorized operator access. This risk depends on network reachability and configuration, specifically if the gateway is accessible and connections can be authorized via Tailscale without validating the shared secret.
Mitigation Recommendations
Upgrade OpenClaw CLI to version 2026.2.2 or later, where the vulnerability is fixed. Additionally, restrict gateway WebSocket access to trusted networks and users, for example by limiting Tailnet users and ACLs when using Tailscale Serve, to reduce exposure to untrusted parties.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- BREW-openclaw-cli-CVE-2026-28472
- Osv Schema Version
- 1.7.3
- Ecosystems
- ["Homebrew"]
- Cvss Version
- 3.1
Threat ID: 6ac245c612601ec6a3167e90
Added to database: 10/04/2026, 12:25:42 UTC
Last enriched: 10/04/2026, 13:09:06 UTC
Last updated: 10/04/2026, 16:08:37 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.