MediumVulnerability
GHSA-7rcp-mxpq-72pj: OpenClaw Chutes manual OAuth state validation bypass can cause credential substitution
- Identifier
- GHSA-7rcp-mxpq-72pj
- Published
- Record updated
- Affected
- openclaw < 2026.2.14
- Fixed in
- 2026.2.14
- released February 14, 2026, 3 days before disclosure
Summary
The manual Chutes OAuth login flow in OpenClaw accepted attacker-controlled callback input, bypassing OAuth CSRF state validation. If a user is tricked into pasting attacker-provided OAuth callback data, OpenClaw can exchange an attacker-obtained authorization code and persist tokens for the wrong Chutes account. Affected package: openclaw (npm) at versions <= 2026.2.13 using the manual Chutes OAuth login flow; the automatic local callback flow is not affected.
Mitigation
The manual flow now requires the full redirect URL (must include `code` and `state`), validates the returned `state` against the expected value, and rejects code-only pastes. Fix commit: a99ad11a4107ba8eac58f54a3c1a8a0cf5686f47.
Related items
- MediumCVE-2026-121936: easyVoice server-side request forgery through openaiBaseUrl in /api/v1/ttsSimilar attack · NVD/CVE Database
- MediumCVE-2026-118628: MLflow get-artifacts server-side request forgery information disclosureSimilar attack · NVD/CVE Database
- HighCVE-2026-118625: MLflow Tracking Server privilege escalation via get_endpointsSimilar attack · NVD/CVE Database
- InfoWhen trust becomes the payload: Inside the threats, etc quarterly reportSimilar attack · Elastic Security Labs
- MediumCritical Langflow flaws enable authentication bypass and RCESimilar attack · CSO Online