Student contributes two security patches to OpenClaw production system
Two security vulnerabilities identified and fixed
A student developer recently contributed two security patches to the OpenClaw production ecosystem, both of which were manually merged into live releases.
Gateway 'fail-open' vulnerability (PR #29198)
The first issue was a "fail-open" vulnerability where plugin HTTP routes were "wide open by default." The developer described it as: "if a developer didn't manually lock a door, it was just... open."
The fix involved refactoring the Gateway logic to implement a strict "deny-by-default" stance. This patch touched the core auth middleware for the entire system, which prevented automatic merging. The fix was manually landed on the main branch by @Steipete and shipped as part of the v2026.3.1 release.
Tabnabbing vulnerability in chat images (PR #18685)
The second vulnerability was a classic tabnabbing issue in chat images, where "a malicious site could potentially hijack your session." The developer implemented three security measures to address this:
- Added
noopener - Added
noreferrer - Forced
opener = nullto kill the window reference
This fix was released in v2026.2.24.
Manual merge process
Both patches required manual merging rather than automatic merging due to their impact on core systems. The gateway fix specifically required manual intervention because it affected the core authentication middleware.
The developer noted that seeing their code go live through a manual merge "felt like such a massive level-up" and provided confidence that student contributions can meaningfully impact production security.
📖 Read the full source: r/openclaw
👀 See Also
ClawSecure: Security Platform for OpenClaw Ecosystem with 3-Layer Audit and Real-Time Monitoring
ClawSecure is a dedicated security platform for OpenClaw that performs 3-layer security audits, real-time monitoring with SHA-256 hash tracking every 12 hours, and provides full OWASP ASI coverage. It has audited 3,000+ popular skills and is free to use with no signup required.
LLM-Assisted Exploit: Anthropic's Mythos Preview Helped Build First Public macOS Kernel Exploit on Apple M5 in Five Days
Using Anthropic's Mythos Preview, security firm Calif built the first public macOS kernel memory corruption exploit on Apple's M5 silicon in five days—breaking MIE hardware security that took Apple five years to develop.
Security Warning: ClawProxy Script Stole API Keys, Resulting in Significant OpenRouter Bill
A developer installed a closed-source ClawProxy script from a Reddit user on a sandboxed WSL Ubuntu 24.04 system, which stole their OpenRouter API key and used it via Google Vertex API to run up a large bill on Opus 4.6 overnight.
How AI Text Watermarking Works: Secret Keys, Green/Red Word Choices, and Detection
Text watermarking hides marks in word choices, not characters. A secret key tilts word selection toward green, and detection counts green words to spot AI-generated text.