{"data":{"id":"0dfdf26d-14eb-4e6b-8762-ac8e8192b17c","title":"GHSA-hv93-r4j3-q65f: OpenClaw Hook Session Key Override Enables Targeted Cross-Session Routing","summary":"OpenClaw's `POST /hooks/agent` endpoint used a payload `sessionKey` directly for routing, so a holder of a valid hook token could steer messages into chosen sessions when request-level override was enabled. Affected versions are `openclaw` `>= 2.0.0-beta3` and `< 2026.2.12`, and exploitation requires that the target session key can be derived or guessed.","solution":"Fixed in `openclaw` `2026.2.12`. The fix makes `POST /hooks/agent` reject payload `sessionKey` unless `hooks.allowRequestSessionKey=true`, adds `hooks.defaultSessionKey` and `hooks.allowedSessionKeyPrefixes`, and adds a security audit warning for unsafe settings. Recommended configuration: `\"hooks\": {\"enabled\": true, \"token\": \"${OPENCLAW_HOOKS_TOKEN}\", \"defaultSessionKey\": \"hook:ingress\", \"allowRequestSessionKey\": false, \"allowedSessionKeyPrefixes\": [\"hook:\"]}`.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-hv93-r4j3-q65f","publishedAt":"2026-02-17T16:43:34.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":"high","severity":"high","attackType":["prompt_injection"],"issueType":"vulnerability","affectedPackages":["openclaw@>= 2.0.0-beta3, < 2026.2.12 (fixed: 2026.2.12)"],"affectedPackageNames":["openclaw"],"affectedPackageRefs":["npm:openclaw"],"affectedVendors":[],"affectedVendorsRaw":["OpenClaw"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":["GHSA-hv93-r4j3-q65f"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":null,"fixReleasedAt":"2026-02-13T01:53:22.639Z","daysToFix":-4,"fixCheckedAt":"2026-10-29T21:41:02.339Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.8,"researchCategory":null,"atlasIds":["AML.T0051"],"fixes":[{"ecosystem":"npm","name":"openclaw","fixedVersion":"2026.2.12","matchedVersion":"2026.2.12","fixReleasedAt":"2026-02-13T01:53:22.639Z","daysToFix":-4,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:41:02.193Z"}]}}