Openclaw cli: OpenClaw's unauthenticated Nostr profile HTTP endpoints allow remote profile/config tampering (CVE-2026-28450)
Description
OpenClaw's optional Nostr plugin exposes unauthenticated HTTP endpoints that allow remote attackers to read and modify Nostr profile data and persist changes to the gateway configuration. This affects deployments with the Nostr plugin installed and enabled, where the gateway HTTP port is accessible beyond localhost. The vulnerability is fixed in version 2026.2.12 by requiring gateway authentication for plugin HTTP requests. Until upgraded, restricting gateway HTTP exposure is recommended.
CVSS v3.1
Score 6.2medium
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The OpenClaw Nostr channel plugin exposes profile management HTTP endpoints that are dispatched without requiring authentication, allowing unauthenticated remote callers to read or modify the Nostr profile and persist changes to the gateway configuration. Profile updates are also published as signed Nostr events using the bot's private key. This vulnerability affects OpenClaw versions up to 2026.2.9 with the Nostr plugin installed and enabled. The issue is exploitable when the gateway HTTP port is accessible beyond localhost. The fix, introduced in version 2026.2.12, enforces gateway authentication for plugin HTTP requests under /api/channels/* before dispatching to plugin handlers.
Potential Impact
Unauthenticated remote attackers can read and modify Nostr profile information and persist unauthorized changes to the gateway configuration. This could lead to unauthorized profile tampering and potentially misuse of the bot's identity via signed Nostr events. The vulnerability requires network access to the gateway HTTP port beyond localhost.
Mitigation Recommendations
Upgrade OpenClaw to version 2026.2.12 or later, which enforces gateway authentication for plugin HTTP requests. As a temporary mitigation, restrict gateway HTTP exposure by binding the gateway HTTP service to localhost only or enforcing network-layer access controls until the upgrade is applied.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- BREW-openclaw-cli-CVE-2026-28450
- Osv Schema Version
- 1.7.3
- Ecosystems
- ["Homebrew"]
- Cvss Version
- 3.1
Threat ID: 6ac245c912601ec6a3167f16
Added to database: 10/04/2026, 12:25:45 UTC
Last enriched: 10/04/2026, 13:11:02 UTC
Last updated: 10/04/2026, 16:08:37 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.