{"id":"CVE-2026-28472","aliases":["GHSA-rv39-79c4-7459"],"url":"https://o3.security/vulnerability/CVE-2026-28472","summary":"OpenClaw < 2026.2.2 - Device Identity Check Bypass in Gateway WebSocket Connect Handshake","details":"### Summary\n\nThe gateway WebSocket `connect` handshake could allow skipping device identity checks when `auth.token` was present but not yet validated.\n\n### Details\n\nIn `src/gateway/server/ws-connection/message-handler.ts`, the device-identity requirement could be bypassed based on the *presence* of a non-empty `connectParams.auth.token` rather than a *validated* shared-secret authentication result.\n\n### Impact\n\nIn deployments where the gateway WebSocket is reachable and connections can be authorized via Tailscale without validating the shared secret, a client could connect without providing device identity/pairing. Depending on version and configuration, this could result in operator access.\n\n### Deployment Guidance\n\nPer OpenClaw security guidance, the gateway should only be reachable from a trusted network and by trusted users (for example, restrict Tailnet users/ACLs when using Tailscale Serve).\n\nIf the gateway WebSocket is only reachable by trusted users, there is typically no untrusted party with network access to exploit this issue.\n\n### Affected Packages / Versions\n\n- Package: `openclaw` (npm)\n- Affected: `<= 2026.2.1`\n- Fixed: `>= 2026.2.2`\n\n### Fix\n\nDevice-identity skipping now requires *validated* shared-secret authentication (token/password). Tailscale-authenticated connections without validated shared secret require device identity.\n\n### Fix Commit(s)\n\n- fe81b1d7125a014b8280da461f34efbf5f761575\n\nThanks @simecek for reporting.","published":"2026-03-05T21:59:48.220Z","modified":"2026-08-12T03:51:12.902073174Z","cvss":null,"epss":{"score":0.00352,"percentile":0.27796,"asOf":"2026-08-24"},"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"npm","name":"openclaw","fixedVersion":"2026.2.2"}],"fix":{"url":"https://github.com/openclaw/openclaw/commit/fe81b1d7125a014b8280da461f34efbf5f761575","label":"openclaw/openclaw@fe81b1d"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/28xxx/CVE-2026-28472.json"},{"type":"ADVISORY","url":"https://github.com/openclaw/openclaw/security/advisories/GHSA-rv39-79c4-7459"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28472"},{"type":"ADVISORY","url":"https://www.vulncheck.com/advisories/openclaw-device-identity-check-bypass-in-gateway-websocket-connect-handshake"},{"type":"FIX","url":"https://github.com/openclaw/openclaw/commit/fe81b1d7125a014b8280da461f34efbf5f761575"},{"type":"PACKAGE","url":"https://github.com/openclaw/openclaw"},{"type":"WEB","url":"https://github.com/openclaw/openclaw/releases/tag/v2026.2.2"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-08-12T03:51:12.902073174Z"}}