Improper Restriction of Excessive Authentication Attempts in OpenClaw - #VU125128

Detailed vulnerability description

The vulnerability allows a remote attacker to cause a denial of service.

The vulnerability exists due to improper restriction of excessive authentication attempts in the hooks HTTP handler when handling non-POST requests to /hooks/*. A remote attacker can send repeated non-POST requests with an invalid token to cause a denial of service.

Impact is limited to temporary availability loss for hook-triggered wake or automation delivery, and exploitation may affect legitimate webhook delivery when requests collapse to the same hook auth client key, such as in shared proxy or NAT topologies.

Remediation

Sources

• https://github.com/openclaw/openclaw/security/advisories/GHSA-6rmx-gvvg-vh6j
• https://github.com/advisories/GHSA-6rmx-gvvg-vh6j