CVE-2026-32974 - Vulnerability Analysis

Overview

OpenClaw < 2026.3.12 contains an authentication bypass caused by missing encryptKey in Feishu webhook mode, letting unauthenticated attackers inject forged events and trigger downstream tool execution, exploit requires network access to webhook endpoint.

Severity & Score

Impact

Unauthenticated attackers can inject forged events and trigger execution of downstream tools, potentially leading to unauthorized actions.

Mitigation

Update to version 2026.3.12 or later.

References

• https://github.com/openclaw/openclaw/security/advisories/GHSA-g353-mgv3-8pcj
• https://www.vulncheck.com/advisories/openclaw-forged-event-injection-via-feishu-webhook-verification-token

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner