【中危】openclaw 安全更新（GHSA-9c3v-684m-579c）

安全情报快照 · 风险级别：中危 · CVSS：6.5 · GHSA-9c3v-684m-579c

先看结论

openclaw存在安全风险，< 2026.6.5 受影响，建议升级至 2026.6.5。

影响范围

生态	组件	受影响版本	首个修复版本
npm	`openclaw`	< 2026.6.5	2026.6.5

处置建议

优先将 openclaw 升级至 2026.6.5 或更高版本；升级前请结合业务依赖完成兼容性验证。

上游技术详情（原文）

Summary

MCP SSE redirects could forward Authorization headers. In affected versions, a lower-trust caller or configured input path could execute or persist actions beyond the caller's intended authorization.

This advisory is scoped to the named feature and configuration. It does not change OpenClaw's trusted-operator model: authenticated Gateway operators, installed plugins, and intentional local execution surfaces remain trusted unless a separate policy, approval, allowlist, sandbox, or auth boundary is crossed.

Impact

When the affected feature is enabled and reachable, this could execute or persist actions beyond the caller's intended authorization. Practical impact depends on the operator's configuration and whether lower-trust input can reach that path.

Patched Versions

The first stable patched version is 2026.6.5.

Mitigations

Upgrade to a patched OpenClaw release when one is listed. Before upgrading, restrict the affected feature to trusted operators or disable it when it is not needed. As general hardening, keep channel and tool allowlists narrow, avoid sharing one Gateway between mutually untrusted users, and disable the affected feature when it is not needed.

来源与许可

本页自动同步 GitHub Advisory Database 的公开数据，并保留上游原文供核验；不宣称原创分析。数据许可：CC-BY-4.0。