OpenClaw reuses the gateway auth token in the owner ID prompt hashing fallback
Vulnerability
OpenClaw reused gateway.auth.token (and gateway.remote.token) as a fallback hash secret for owner-ID prompt obfuscation when commands.ownerDisplay=hash and commands.ownerDisplaySecret was unset.
This created secret dual-use between gateway authentication and prompt metadata hashing.
Impact
- Auth-secret dual-use across security domains (gateway auth and prompt metadata hashing).
- Hash outputs are visible to third-party model providers in system prompts.
- No direct plaintext token disclosure.
- Practical risk is highest when operators use weak gateway tokens and leave owner hash secret unset.
Affected Packages / Versions
- Package:
openclaw(npm) - Latest affected published version:
2026.2.21-2 - Vulnerable range:
<= 2026.2.21-2 - Patched version (planned next release):
2026.2.22
Affected Components
src/agents/cli-runner/helpers.tssrc/agents/pi-embedded-runner/run/attempt.tssrc/agents/pi-embedded-runner/compact.ts
Remediation
- Added a shared owner-display resolver and secret-generation helper.
- Removed fallback to
gateway.auth.tokenandgateway.remote.token. - Auto-generates and persists a dedicated
commands.ownerDisplaySecretwhen hash mode is enabled and secret is missing.
Fix Commit(s)
- c99e7696e6893083b256f0a6c88fb060f3a76fb7
Release Process Note
patched_versions is pre-set to the planned next release (2026.2.22). Once npm release 2026.2.22 is published, this advisory only needs to be published.
OpenClaw thanks @aether-ai-agent for reporting.
Affected software
Click a technology to see all vulnerabilities affecting it.
| Platform | Package | Vulnerable versions | Fixed in |
|---|---|---|---|
| npm package | openclaw | < 2026.2.22 | 2026.2.22 |
References
- https://github.com/openclaw/openclaw/security/advisories/GHSA-v6x2-2qvm-6gv8
- https://nvd.nist.gov/vuln/detail/CVE-2026-32897
- https://github.com/openclaw/openclaw/commit/c99e7696e6893083b256f0a6c88fb060f3a76fb7
- https://github.com/openclaw/openclaw
- https://www.vulncheck.com/advisories/openclaw-authentication-token-reuse-in-owner-id-prompt-hashing-fallback
- CVSS vector
CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N- Weakness (CWE)
CWE-522- Platform
- npm
- Package
openclaw- Disclosed
- 03.03.2026
- Updated
- 11.10.2026 10:22
Sources and licenses
OSV / GitHub Advisory Database - GHSA-v6x2-2qvm-6gv8 - CC BY 4.0
Vulnerability history: openclaw
All published vulnerabilities of this package (npm package), newest first. Shows whether this is a one-off slip or a package that needs watching.
- Total entries
- 588
- First → latest
- 02.2026 07.2026
- Without a fix
- 9
- Exploited in attacks
- 0
Severity breakdown
- Critical 20
- High 215
- Medium 299
- Low 54
Disclosures per year
- 2026: 588
-
OpenClaw reuses the gateway auth token in the owner ID prompt hashing fallback this entry
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.