openclaw/clawhub CVE-862 Quarantined Content Disclosure via Changelog Preview

Vulnerability Key Information Summary Vulnerability Overview Title: Changelog preview can disclose quarantined skill content to callers and the AI provider CVE ID: CVE-862 Severity: Moderate Description: Signed callers can request a changelog preview for another skill. Previously, this was read via file read permissions using normal content access permissions. Up to 8,000 characters of quarantined content may be submitted to the AI provider and reflected in its response. Scope of Impact Affected Software: openclaw/clawhub Affected Version: Fixed Version: Impact Details: - Signed callers can request a changelog preview for another skill - Up to 8,000 characters of quarantined content may be submitted to the AI provider - The issue was confirmed in revision - The complete history of affected revisions has not been determined Remediation Fixing PR: PR #3682 Fixed Version: Deployment Recommendation: Self-hosted deployments should update to this version or a later one Verification: - Five-tree validation passed: 6,663 tests, static analysis, schema/CLI/Dunam/Inpackboard TypeScript checks, build validation, and source code review - Test deployments and production deployments successfully targeted this exact version on 2026-09-11 - Affected hosted deployments on https://clawhub.ai have been verified post-release Regression Verification Before Fix: Revision returned the changelog to external callers instead of denying access After Fix: 10 focused tests passed, covering hidden content, pending/blocked/deleted versions, normalized owners and public access, initial releases, and zero provider calls in denied deployments Local Convex verified at that the action for a synthetic external caller is rejected: . No production credentials or data were used. Severity Assessment Level: Moderate Assessment Basis: Unchanged. An authenticated external caller could cause restricted prior version content to reach the AI provider and potentially be reflected in the changelog response. The demonstrated confidentiality boundary violation is limited by content extraction and preview paths; account takeover or code execution was not demonstrated. Note: This is a qualitative maintainer assessment and no numerical CVSS score has been assigned. The severity describes the vulnerability in the affected versions, independent of the completed hosted deployments.

Goal Reached Thanks to every supporter — we hit 100%!

openclaw/clawhub CVE-862 Quarantined Content Disclosure via Changelog Preview

More from this source