OpenClaw affected by iMessage remote attachment SCP hardening (strict host-key checks and remoteHost validation)
Summary
Remote iMessage attachment fetches used SCP with trust-on-first-use host-key behavior and accepted unvalidated remote host tokens.
Before the fix:
- SCP used
StrictHostKeyChecking=accept-newin the remote attachment path. channels.imessage.remoteHostwas not validated as a strict SSH host token.
Impact
In remote iMessage deployments that use SCP attachment fetching, a first-connection MITM/DNS-poisoning scenario could cause the wrong host key to be trusted. Unsafe remote host token values could also alter SCP argument semantics.
Affected Packages / Versions
- Package:
openclaw(npm) - Latest published npm version currently affected:
2026.2.17 - Vulnerable range (structured field):
<= 2026.2.17 - Patched version (pre-set for next release):
>= 2026.2.19
Fix
The fix hardens remote attachment SSH/SCP handling by:
- requiring
StrictHostKeyChecking=yesfor SCP and SSH tunnel paths, - adding strict
remoteHostnormalization/validation, - adding
--argument barrier for SCP remote source parsing, - validating
channels.imessage.remoteHostin config schema, - rejecting unsafe auto-detected host tokens at runtime.
Fix Commit(s)
- Pushed to
main: 49d0def6d1e88f002026b1d2a35aa615d48a751a
OpenClaw thanks @allsmog for reporting.
Affected software
Click a technology to see all vulnerabilities affecting it.
| Platform | Package | Vulnerable versions | Fixed in |
|---|---|---|---|
| npm package | openclaw | < 2026.2.19 | 2026.2.19 |
References
- CVSS vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N- Weakness (CWE)
CWE-295, CWE-78- Platform
- npm
- Package
openclaw- Disclosed
- 03.03.2026
- Updated
- 11.10.2026 10:22
Sources and licenses
OSV / GitHub Advisory Database - GHSA-2mc2-g238-722j - CC BY 4.0
Vulnerability history: openclaw
All published vulnerabilities of this package (npm package), newest first. Shows whether this is a one-off slip or a package that needs watching.
- Total entries
- 588
- First → latest
- 02.2026 07.2026
- Without a fix
- 9
- Exploited in attacks
- 0
Severity breakdown
- Critical 20
- High 215
- Medium 299
- Low 54
Disclosures per year
- 2026: 588
-
OpenClaw affected by iMessage remote attachment SCP hardening (strict host-key checks and remoteHost validation) this entry
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.