This vulnerability in OpenClaw's OAuth authorization implementation exposes sensitive data, including stored credentials, in the authorization URL query string. Remote attackers can exploit this flaw by tricking a user into initiating an OAuth authorization flow, leading to credential disclosure. The vulnerability has a CVSS score of 5.3, indicating a moderate severity level. OpenClaw has released a security update to fix this issue, as detailed in their GitHub security advisory.

Successful exploitation can lead to disclosure of stored credentials, potentially enabling further compromise of the affected system or user accounts. The vulnerability does not affect integrity or availability but impacts confidentiality. User interaction is required, which limits the ease of exploitation.

OpenClaw has issued an official update that corrects this vulnerability. Users and administrators should apply the update provided by OpenClaw as soon as possible to remediate the issue. No additional mitigation steps are indicated by the vendor advisory.