Advisory details:
github_osv / GHSA-2mc2-g238-722j
| Advisory ID | github_osv/GHSA-2mc2-g238-722j |
| Aliases | |
| Summary | OpenClaw affected by iMessage remote attachment SCP hardening (strict host-key checks and remoteHost validation) ## Summary Remote iMessage attachment fetches used SCP with trust-on-first-use host-key behavior and accepted unvalidated remote host tokens. Before the fix: - SCP used `StrictHostKeyChecking=accept-new` in the remote attachment path. - `channels.imessage.remoteHost` was not validated as a strict SSH host token. ## Impact In remote iMessage deployments that use SCP attachment fetching, a first-connection MITM/DNS-poisoning scenario could cause the wrong host key to be trusted. Unsafe remote host token values could also alter SCP argument semantics. ## Affected Packages / Versions - Package: `openclaw` (npm) - Latest published npm version currently affected: `2026.2.17` - Vulnerable range (structured field): `<= 2026.2.17` - Patched version (pre-set for next release): `>= 2026.2.19` ## Fix The fix hardens remote attachment SSH/SCP handling by: - requiring `StrictHostKeyChecking=yes` for SCP and SSH tunnel paths, - adding strict `remoteHost` normalization/validation, - adding `--` argument barrier for SCP remote source parsing, - validating `channels.imessage.remoteHost` in config schema, - rejecting unsafe auto-detected host tokens at runtime. ## Fix Commit(s) - Pushed to `main`: 49d0def6d1e88f002026b1d2a35aa615d48a751a OpenClaw thanks @allsmog for reporting. |
| Status | Published |
| Exploitability | 0.5 |
| Weighted Severity | 4.8 |
| Risk | 2.4 |
| Affected and Fixed Packages | Package Details |
| Introduced and Fixed Package Commit Patches | Package Commit Patches Details |
| System | Score | Found at |
|---|---|---|
| cvssv4 | 5.3 | https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/03/GHSA-2mc2-g238-722j/GHSA-2mc2-g238-722j.json |
| generic_textual | MODERATE |
No EPSS data available for this advisory.
| Patch URL | |
|---|---|
| There are no known patches. | |
| Attack Vector (AV) | Attack Complexity (AC) | Attack Requirements (AT) | Privileges Required (PR) | User Interaction (UI) | Vulnerable System Impact Confidentiality (VC) | Vulnerable System Impact Integrity (VI) | Vulnerable System Impact Availability (VA) | Subsequent System Impact Confidentiality (SC) | Subsequent System Impact Integrity (SI) | Subsequent System Impact Availability (SA) |
|---|---|---|---|---|---|---|---|---|---|---|
network adjacent local physical |
low high |
none present |
none low high |
none passive active |
high low none |
high low none |
high low none |
high low none |
high low none |
high low none |
There are no SSVC decisions available.