Description
OpenClaw versions prior to 2026.2.21 accept prototype-reserved keys in runtime /debug set override object values, allowing prototype pollution attacks. Authorized /debug set callers can inject __proto__, constructor, or prototype keys to manipulate object prototypes and bypass command gate restrictions.
Problem types
CWE-1321: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
Product status
Any version before 2026.2.21
Credits
tdjackey
References
github.com/...enclaw/security/advisories/GHSA-62f6-mrcj-v8h5 (GitHub Security Advisory (GHSA-62f6-mrcj-v8h5))
github.com/...ommit/fbb79d4013000552d6a2c23b9613d8b3cb92f6b6 (Patch Commit)
www.vulncheck.com/...otype-pollution-via-debug-override-path (VulnCheck Advisory: OpenClaw < 2026.2.21 - Prototype Pollution via Debug Override Path)