Vulnerability Description
OpenClaw versions prior to 2026.2.26 server-http contains an authentication bypass vulnerability in gateway authentication for plugin channel endpoints due to path canonicalization mismatch between the gateway guard and plugin handler routing. Attackers can bypass authentication by sending requests with alternative path encodings to access protected plugin channel APIs without proper gateway authentication.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Openclaw | Openclaw | < 2026.2.26 |
Related Weaknesses (CWE)
References
- https://github.com/openclaw/openclaw/security/advisories/GHSA-8j2w-6fmm-m587Vendor Advisory
- https://www.vulncheck.com/advisories/openclaw-authentication-bypass-via-path-canThird Party Advisory
FAQ
What is CVE-2026-32031?
CVE-2026-32031 is a vulnerability with a CVSS score of 4.8 (MEDIUM). OpenClaw versions prior to 2026.2.26 server-http contains an authentication bypass vulnerability in gateway authentication for plugin channel endpoints due to path canonicalization mismatch between th...
How severe is CVE-2026-32031?
CVE-2026-32031 has been rated MEDIUM with a CVSS base score of 4.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-32031?
Check the references section above for vendor advisories and patch information. Affected products include: Openclaw Openclaw.