1  info:
 2    name: OpenClaw
 3    cve: CVE-2026-3691
 4    summary: OpenClaw Client PKCE Verifier Information Disclosure Vulnerability
 5    details: >-
 6      OpenClaw Client PKCE Verifier Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose
 7      stored credentials on affected installations of OpenClaw. User interaction is required to exploit this vulnerability in
 8      that the target must initiate an OAuth authorization flow.
 9  
10      The specific flaw exists within the implementation of OAuth authorization. The issue results from the exposure of sensitive
11      data in the authorization URL query string. Specifically, the macOS beta onboarding flow used the PKCE code_verifier value
12      as OAuth state, exposing that secret in front-channel URL state. An attacker can leverage this vulnerability to disclose
13      stored credentials, leading to further compromise. Was ZDI-CAN-29381.
14    cvss: ''
15    severity: MEDIUM
16    security_advise: Upgrade to OpenClaw version 2026.2.25 or later. OpenClaw has removed Anthropic OAuth sign-in from macOS onboarding and now supports setup-token-only Anthropic subscription auth in this path.
17    references:
18    - https://github.com/openclaw/openclaw/security/advisories/GHSA-6g25-pc82-vfwp
19    - https://www.zerodayinitiative.com/advisories/ZDI-26-229/
20  rule: version < "2026.2.25"
21  references:
22  - https://github.com/openclaw/openclaw/security/advisories/GHSA-6g25-pc82-vfwp
23  - https://www.zerodayinitiative.com/advisories/ZDI-26-229/