CVE-2026-32001

描述

### Summary A client authenticated with a shared gateway token could connect as `role=node` without device identity/pairing, then call `node.event` to trigger `agent.request` and `voice.transcript` flows. ### Affected Packages / Versions - Package: npm `openclaw` - Affected versions: `<= 2026.2.21-2` - Patched version: `2026.2.22` (planned next release) ### Details The WebSocket connect path allowed device-less bypass whenever shared auth succeeded. That bypass did not restrict role, so a client could claim `role=node` with no device identity and still pass handshake auth. Because `node.event` is node-role allowed, this enabled unauthorized node event injection into agent-trigger flows. ### Impact Unauthorized `node.event` injection can trigger agent execution and voice transcript flows for clients that only hold the shared gateway token, without node device pairing. ### Remediation Upgrade to `2026.2.22` (or newer) once published. The fix requires device identity for `role=node` connects, even when shared-token auth succeeds. ### Fix Commit(s) - ddcb2d79b17bf2a42c5037d8aeff1537a12b931e ### Release Process Note `patched_versions` is pre-set to the planned next release so once npm release `2026.2.22` is out, advisory publish is a single step. OpenClaw thanks @tdjackey for reporting.

如何修補 CVE-2026-32001

要修補 CVE-2026-32001,請將受影響套件升級到下列已修補版本。

• —升級至 2026.2.22 或更新版本

CVE-2026-32001 正在被利用嗎?

低 — EPSS 為 0.3%,目前沒有觀察到大規模利用活動。

受影響套件(1)

• from 0, < 2026.2.22

CVSS 分數