GHSA-5847-rm3g-23mw: OpenClaw has hook auth rate limiter bypass via IPv4-mapped IPv6 client key variants

Summary

OpenClaw's hook authentication throttle keyed failed attempts by raw socket remoteAddress text, so IPv4 and IPv4-mapped IPv6 forms of the same client (such as 1.2.3.4 and ::ffff:1.2.3.4) received separate rate-limit buckets. An attacker could split failed attempts across both forms and double the brute-force budget from 20 to 40 attempts per 60-second window. Affected are the openclaw npm package at versions <= 2026.2.21-2, in src/gateway/server-http.ts and src/gateway/auth-rate-limit.ts.

Mitigation

Patched version (planned next release): 2026.2.22. The remediation centralizes and reuses canonical client-IP normalization for auth rate-limiting, and uses that canonical key for hook auth throttling. Fix commit: 3284d2eb227e7b6536d543bcf5c3e320bc9d13c5.

Related items

• LowCloakFEM: Agentic FEM Code Generation for Red-Teaming Computational Resource ExhaustionSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
• MediumThe Rise of LLMJacking: How Threat Actors Monetize Compromised Cloud and Model ResourcesSimilar attack · Google Threat Intelligence
• InfoThe Blind Spots of Detection: Adversarial Perturbation Attacks against Watchdogs in Distributed LLM InferenceSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
• HighCVE-2026-118761: Kubeflow Pipelines decompression bomb in pipeline archive uploadSimilar attack · NVD/CVE Database
• LowOpenCode User Hit with Hostile Backlash After Reporting Free AI LoopholeSimilar attack · Socket Blog