OpenClaw (npm package openclaw) versions before 2026.8.1 contain deterministic hashes computed over the original, unredacted configuration. These hashes are returned in redacted configuration responses. When the Gateway password has low entropy and the remaining configuration values can be reconstructed, an attacker who can obtain the redacted configuration can use the hash as an offline password verifier, allowing password recovery and grant shared‑secret operator authority. The leak does not expose secret references directly, but it enables password cracking. This is a classic information disclosure vulnerability (CWE‑200).

The affected product is OpenClaw (npm package openclaw) in all releases prior to 2026.8.1. The vulnerability applies to any installation that exposes the redacted configuration and includes the deterministic hash, i.e., all instances of OpenClaw before the 2026.8.1 patch.

The CVSS score of 7.7 indicates high severity. The EPSS score is not available, so the likelihood of exploitation cannot be precisely quantified, but the presence of an offline password verifier makes the vulnerability significant. The issue is not listed in CISA KEV. The likely attack vector is remote via an API endpoint that returns configuration, such as config.get; the attacker first obtains the redacted configuration, then performs offline hashing attacks to verify password candidates, bypassing any gateway rate limiting. This approach can lead to compromise of operator authority if the Gateway password is weak.