TI-2026-20585 Aliases CVE-2026-25474 GHSA-mp5h-m6qj-6292

OpenClaw has a Telegram webhook request forgery (missing `channels.telegram.webhookSecret`) → auth bypass

LOW 38CWE-345Published 2026-02-19 · Updated 2026-02-19

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: Security bypass
Confidentiality · integrity · availability: None · High · None
Fix status: Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and GitHub. Impact type from CWE-345.

Summary

OpenClaw is a personal AI assistant. In versions 2026.1.30 and below, if channels.telegram.webhookSecret is not set when in Telegram webhook mode, OpenClaw may accept webhook HTTP requests without verifying Telegram’s secret token header. In deployments where the webhook endpoint is reachable by an attacker, this can allow forged Telegram updates (for example spoofing message.from.id). If an attacker can reach the webhook endpoint, they may be able to send forged updates that are processed as if they came from Telegram. Depending on enabled commands/tools and configuration, this could lead to unintended bot actions. Note: Telegram webhook mode is not enabled by default. It is enabled only when `channels.telegram.webhookUrl` is configured. This issue has been fixed in version 2026.2.1.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00232 14th percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by NVD

Fix Fixed openclaw (openclaw): 2026.2.1openclaw (npm): 2026.2.1

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: Yes
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
OpenClaw	openclaw	before 2026.2.1	2026.2.1	Patch available	CNA
—	openclaw (npm)	before 2026.2.1	2026.2.1	Patch available	GHSA-mp5h-m6qj-6292

openclaw VendorOpenClaw Affected before 2026.2.1 Fixed in 2026.2.1 Patch available CNA
openclaw (npm) Vendor— Affected before 2026.2.1 Fixed in 2026.2.1 Patch available GHSA-mp5h-m6qj-6292

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:openclaw:openclaw::::::node.js::*	before 2026.2.1	Vulnerable	OpenClaw

cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:* Versions before 2026.2.1 Vulnerable ·OpenClaw

Remediation

Fix · CNA openclaw (openclaw) Fixed in 2026.2.1
Fix · GHSA-mp5h-m6qj-6292 openclaw (npm) Fixed in 2026.2.1 Advisory →

Timeline

2026-10-02 Threatist record created from CVE-2026-25474
2026-10-03 Alias added: GHSA-mp5h-m6qj-6292

References

Exploit 1

https://github.com/openclaw/openclaw/security/advisories/GHSA-mp5h-m6qj-6292

Patch 4

Advisory 1

https://nvd.nist.gov/vuln/detail/CVE-2026-25474

Other 2

TI-2026-25309 OpenClaw < 2026.3.28 Media Parsing Path Traversal to Arbitrary File Read CVSS 4.0HIGH 8.7
TI-2026-20394 Exposure of resource to wrong sphere in OpenClaw CVSS 3.1HIGH 8.8
TI-2026-27742 OpenClaw < 2026.3.24 - Arbitrary Code Execution via .npmrc in Local Plugin/Hook Installation CVSS 4.0HIGH 8.4
TI-2026-27766 OpenClaw < 2026.3.24 - Denial of Service via Feishu Webhook Pre-Auth Body Parsing CVSS 4.0MEDIUM 6.9
TI-2026-07315 OpenClaw bluebubbles Webhook monitor.ts handleBlueBubblesWebhookRequest improper authentication CVSS 4.0MEDIUM 6.9
TI-2026-17789 OpenClaw < 2026.2.22 - Allowlist Bypass via Command Substitution in system.run CVSS 4.0HIGH 7.5

See all 574 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences