OpenClaw before 2026.5.2 allows model-controlled metadata to forward message.action payloads, which includes Gateway credentials, to attacker-supplied loopback URLs, thereby exposing the Gateway’s authentication tokens and the payload contents to remote attackers. The vulnerability permits unauthenticated interception of sensitive credentials and potential misuse of the Gateway service.

The affected product is OpenClaw; all installations running a version earlier than 2026.5.2 are vulnerable. No additional vendor or product variants are listed.

The CVSS score of 6 indicates a moderate severity. EPSS information is not available, and the vulnerability is not yet listed in the CISA KEV catalog. While the description does not detail the exact attack vector, it is inferred that a remote attacker can supply a malicious loopback target through model-controlled action metadata and capture the forwarded credentials. The lack of an official patch or workaround in the advisory suggests that the primary risk lies in vulnerable systems remaining unpatched.