OpenClaw's fetchWithSsrFGuard(...) followed cross-origin redirects while preserving arbitrary caller-supplied headers except for a narrow denylist (Authorization, Proxy-Authorization, Cookie, Cookie2). This allowed custom authorization headers such as X-Api-Key, Private-Token, and similar sensitive headers to be forwarded to a different origin after a redirect.
The fix switches cross-origin redirect handling from a narrow sensitive-header denylist to a safe-header allowlist, so only benign headers such as content negotiation and cache validators survive an origin change.
Affected Packages / Versions
- Package:
openclaw (npm)
- Affected versions:
<= 2026.3.2
- Patched version:
2026.3.7
- Latest published npm version at patch time:
2026.3.2
Impact
A remote service that could trigger a redirect across origins could receive custom authorization credentials attached by OpenClaw callers. This can expose API keys, bearer-style custom headers, or private token headers intended only for the original destination.
Fix Commit(s)
46715371b0612a6f9114dffd1466941ac476cef5
Verification
pnpm check passedpnpm test:fast passed- Focused redirect regression tests passed
pnpm exec vitest run --config vitest.gateway.config.ts still has unrelated current-main failures in src/gateway/server-channels.test.ts and src/gateway/server-methods/agents-mutate.test.ts
Release Process Note
npm 2026.3.7 was published on March 8, 2026. This advisory is fixed in the released package.
Thanks @Rickidevs for reporting.
References
Rickidevs Reporter
OpenClaw's
fetchWithSsrFGuard(...)followed cross-origin redirects while preserving arbitrary caller-supplied headers except for a narrow denylist (Authorization,Proxy-Authorization,Cookie,Cookie2). This allowed custom authorization headers such asX-Api-Key,Private-Token, and similar sensitive headers to be forwarded to a different origin after a redirect.The fix switches cross-origin redirect handling from a narrow sensitive-header denylist to a safe-header allowlist, so only benign headers such as content negotiation and cache validators survive an origin change.
Affected Packages / Versions
openclaw(npm)<= 2026.3.22026.3.72026.3.2Impact
A remote service that could trigger a redirect across origins could receive custom authorization credentials attached by OpenClaw callers. This can expose API keys, bearer-style custom headers, or private token headers intended only for the original destination.
Fix Commit(s)
46715371b0612a6f9114dffd1466941ac476cef5Verification
pnpm checkpassedpnpm test:fastpassedpnpm exec vitest run --config vitest.gateway.config.tsstill has unrelated current-mainfailures insrc/gateway/server-channels.test.tsandsrc/gateway/server-methods/agents-mutate.test.tsRelease Process Note
npm
2026.3.7was published on March 8, 2026. This advisory is fixed in the released package.Thanks @Rickidevs for reporting.
References