CVE-2026-43569

OpenClaw < 2026.4.9 - Untrusted Provider Plugin Auto-enablement via Workspace Provider Auth

Published May 5, 2026 CVSS 4.0 · 7.7 High EPSS < 1% KEV · Not listed

Description

OpenClaw before 2026.4.9 contains an authentication bypass vulnerability allowing untrusted workspace plugins to be auto-enabled during non-interactive onboarding when provider auth choices are shadowed. Attackers can exploit this by crafting malicious workspace plugins that are automatically selected and enabled during authentication setup without explicit user consent.

Analysis

Technical impact

OpenClaw prior to version 2026.4.9 allows an authentication bypass whereby untrusted workspace plugins can be automatically enabled during non‑interactive onboarding when provider authentication choices are shadowed. An attacker can craft a malicious plugin that is selected and activated without the user’s explicit consent, effectively granting the plugin undeserved execution rights. This bypass of user approval constitutes a breach of integrity and can lead to covert code execution within the trusted environment.

Affected Systems

The vulnerability affects the OpenClaw open‑source project, specifically all releases older than 2026.4.9. Users running those versions are exposed to the risk of malicious workspace plugins being enabled automatically during onboarding.

Risk and Exploitability

The CVSS score of 7.7 indicates a high severity of this flaw. No EPSS score is available, and the vulnerability is not listed in CISA’s KEV catalog, implying that widespread, documented exploitation has not yet been observed. The likely attack vector is remote: an attacker who can deliver a malicious plugin to a user’s workspace will trigger auto‑enablement during the provider authentication process, potentially compromising the workspace without user awareness. The impact is significant because it permits execution of an untrusted module, aligning with CWE‑829.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

OpenClaw

unaffected

Version	Status	Constraints
`0`	affected	< 2026.4.9
`2026.4.9`	unaffected	—

Configuration 1 [-]

cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*

No data.

Vendor Product Versions

Openclaw

Version	Status	Scheme	Platform
`[0,2026.4.9)`	affected	generic	['node.js']
`2026.4.9`	unaffected	semver	['node.js']

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Upgrade to OpenClaw 2026.4.9 or later.
Configure the system to reject or flag automatic activation of untrusted plugins in non‑interactive onboarding, ensuring explicit user approval is required.
Audit the current set of enabled plugins, identify any that may have been auto‑enabled by this flaw, and remove or replace them.

Generated by OpenCVE AI on May 5, 2026 at 12:21 UTC.

Tracking

Advisories

Source	ID	Title
Github GHSA	GHSA-939r-rj45-g2rj	OpenClaw: Workspace provider auth choices could auto-enable untrusted provider plugins

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Attack Requirements Present

User Interaction Passive

Vulnerable System Confidentiality Impact High

Vulnerable System Integrity Impact High

Vulnerable System Availability Impact High

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.376% probability within 30 days)

Exploitation none

Automatable no

Technical Impact total

References

Link	Providers
https://github.com/openclaw/openclaw/commit/2d97eae53e212ae26f3aebcd6a50ffc6877f770d
https://github.com/openclaw/openclaw/security/advisories/GHSA-939r-rj45-g2rj
https://www.vulncheck.com/advisories/openclaw-untrusted-provider-plugin-auto-enablement-via-workspace-provider-auth

History

May 6, 2026 1:15 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

May 5, 2026 11:45 AM Description updated. Title updated. First appearance in the feed. Weaknesses updated. Affected versions updated. Affected vendors updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		OpenClaw before 2026.4.9 contains an authentication bypass vulnerability allowing untrusted workspace plugins to be auto-enabled during non-interactive onboarding when provider auth choices are shadowed. Attackers can exploit this by crafting malicious workspace plugins that are automatically selected and enabled during authentication setup without explicit user consent.
Title		OpenClaw < 2026.4.9 - Untrusted Provider Plugin Auto-enablement via Workspace Provider Auth
First Time appeared		Openclaw Openclaw openclaw
Weaknesses		CWE-829
CPEs		cpe:2.3:a:openclaw:openclaw::::::node.js::*
Vendors & Products		Openclaw Openclaw openclaw
References		https://github.com/openclaw/openclaw/commit/2d97eae53e212ae26f3aebcd6a50ffc6877f770d https://github.com/openclaw/openclaw/security/advisories/GHSA-939r-rj45-g2rj https://www.vulncheck.com/advisories/openclaw-untrusted-provider-plugin-auto-enablement-via-workspace-provider-auth
Metrics		cvssV3_1 `{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'}` cvssV4_0 `{'score': 7.7, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'}`