OpenClaw Vulnerability: Exposure of PKCE Verifier in macOS Beta Onboarding

openclaw Updated 04 Mar 2026

Summary

03/03/2026

Disclosed on

MODERATE

Severity

Yes i

Fix available

Moderate

Severity

5.1

CVSS Score

GHSA-6g25-pc82-vfwp: OpenClaw: macOS beta onboarding exposed PKCE verifier via OAuth state. Affects openclaw versions < 2026.2.25. Fixed in 2026.2.25. How to fix ↓

Free scan

Check if this vulnerability affects your application

Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.

Check my app free

No signup required · Results in about 60 seconds

Upload your dependency manifest or SBOM

Drag & drop your file here or Browse

Java Javascript PHP Python Go Rust Ruby Dart C/C++ Elixir CycloneDX SPDX

Upload a supported dependency manifest or SBOM. No installation or source-code access required.

See supported files and SBOM formats

SBOM sbom.json · bom.json · bom.xml · *.spdx.json · *.cdx.json · *.cdx.xml

Java pom.xml · gradle.lockfile · buildscript-gradle.lockfile

Javascript package-lock.json · yarn.lock · pnpm-lock.yaml

PHP composer.lock

Python poetry.lock · requirements.txt · Pipfile.lock

Go go.mod

Rust Cargo.lock

Ruby Gemfile.lock

Dart pubspec.lock

C/C++ conan.lock

Elixir mix.lock

Enter your work email to receive your report link.

Verify your email to view the full report and start 30 days of continuous monitoring. No credit card required.

Background

OpenClaw is an open-source application designed to facilitate user onboarding through OAuth authentication. The macOS version of OpenClaw is currently in beta, allowing users to sign in using various OAuth providers. However, a flaw in the onboarding process has been identified, where sensitive information is improperly handled, leading to potential security risks.

Vulnerability Detail

The vulnerability arises from the OpenClaw macOS app's onboarding flow, where the PKCE code_verifier is incorrectly used as the OAuth state. This exposure allows malicious actors to intercept the state value during the OAuth authorization process, potentially leading to unauthorized access to user accounts. The flaw is limited to the macOS beta onboarding path and requires the attacker to obtain both OAuth authorization artifacts and the exposed state values.

How To Fix

Latest published version: 2026.10.6 as of 22 Oct 2026

npm install openclaw@2026.10.6

Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.

If you need the minimum change

2026.2.25

This is the first release that contains the fix.

npm install openclaw@2026.2.25

Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →

Workaround

As a temporary workaround, users can avoid using the Anthropic OAuth sign-in during the macOS onboarding process until they update to the patched version. Instead, they can utilize the setup-token-only Anthropic subscription authentication.

Conclusion

The OpenClaw macOS app has a vulnerability in its beta onboarding flow that exposes sensitive OAuth information. Users are advised to update to the patched version to mitigate the risk. Temporary workarounds are available, but updating is the best course of action to ensure security.

See every vulnerability recorded for openclaw →