Threats tagged 'ghsa-9fc9-8v4x-f5cp'

OpenClaw versions prior to 2026.4.20 have a vulnerability in the agent-facing gateway config.patch and config.apply endpoints that allows bypassing security guards protecting operator-trusted settings. This flaw enables a prompt-injected model with access to the owner-only gateway tool to persist unauthorized changes to critical settings such as sandbox policy, plugin enablement, gateway authentication/TLS, hook routing, MCP server configuration, SSRF policy, and filesystem hardening.