Student contributes two security patches to OpenClaw production system
Two security vulnerabilities identified and fixed
A student developer recently contributed two security patches to the OpenClaw production ecosystem, both of which were manually merged into live releases.
Gateway 'fail-open' vulnerability (PR #29198)
The first issue was a "fail-open" vulnerability where plugin HTTP routes were "wide open by default." The developer described it as: "if a developer didn't manually lock a door, it was just... open."
The fix involved refactoring the Gateway logic to implement a strict "deny-by-default" stance. This patch touched the core auth middleware for the entire system, which prevented automatic merging. The fix was manually landed on the main branch by @Steipete and shipped as part of the v2026.3.1 release.
Tabnabbing vulnerability in chat images (PR #18685)
The second vulnerability was a classic tabnabbing issue in chat images, where "a malicious site could potentially hijack your session." The developer implemented three security measures to address this:
- Added
noopener - Added
noreferrer - Forced
opener = nullto kill the window reference
This fix was released in v2026.2.24.
Manual merge process
Both patches required manual merging rather than automatic merging due to their impact on core systems. The gateway fix specifically required manual intervention because it affected the core authentication middleware.
The developer noted that seeing their code go live through a manual merge "felt like such a massive level-up" and provided confidence that student contributions can meaningfully impact production security.
📖 Read the full source: r/openclaw
👀 See Also
MCP Server CVE Exposure Mapping and Public API Released
Researchers have mapped CVE exposure across thousands of MCP servers and built a public API for querying dependency vulnerabilities. The API allows searching by repo/name, filtering by severity, and sorting by CVE count or recency.
Caelguard: Open-Source Security Scanner for OpenClaw Instances
Caelguard is an open-source security scanner built for OpenClaw that runs 22 checks across your instance, including Docker isolation, tool permission scoping, and skill supply chain verification. It provides a score out of 140 with a letter grade and specific remediation steps.
Chinese AI Companies Running Malicious Distillation Campaigns Against US Firms: DoD CSA
A new DoD CSA report reveals Chinese AI companies are conducting malicious distillation campaigns to steal US AI models, targeting commercial AI products and open-source frameworks.
Linux Kernel Proposes Decentralized Identity System to Replace PGP Web of Trust
Linux kernel maintainers are working on a decentralized identity layer called Linux ID to replace the current PGP web of trust. The system uses W3C-style decentralized identifiers (DIDs) and verifiable credentials to authenticate developers without requiring face-to-face key-signing sessions.