Listen to this Post
How the Mentioned Vulnerability Works
The vulnerability resides in the Tlon settings reconciliation logic within OpenClaw. When the system processes configuration updates, it compares the current allowlist with incoming settings. An explicit empty allowlist—intended to revoke all access—was incorrectly treated as a “null” or “unset” state during reconciliation. Because the code path assumed that an empty array represented missing configuration rather than an intentional deny-all, the reconciliation step silently restored the previously active allowlist. This effectively undid the revocation that an administrator had explicitly applied. The bypass occurs entirely within the internal state merge, without any error or log indicating that the revocation was reverted. The flaw affects versions where the reconciliation logic was introduced or modified, specifically in the npm package version v2026.3.23-2. The issue was triggered only when an empty allowlist was pushed as a setting update; any non-empty allowlist reconciled correctly. The root cause was a conditional that checked for falsy values instead of explicitly checking for the presence of the setting. The fix enforces a strict distinction between “not set” and “explicitly empty” by altering the reconciliation state machine to preserve intentional empty lists.
dailycve form:
Platform: OpenClaw npm
Version: v2026.3.23-2
Vulnerability: Empty allowlist bypass
Severity: Low
date: Mar 24 2026
Prediction: Already patched v2026.3.22
What Undercode Say:
Analytics – bash commands and related code snippets:
Check installed OpenClaw version
npm list openclaw
Verify fix presence (commit 3cbf932)
git log --oneline | grep 3cbf932
Inspect affected reconciliation logic (pre‑fix)
grep -r "empty-allowlist" node_modules/openclaw/
Test empty allowlist behavior (example API call)
curl -X PATCH /settings/tlon -d '{"allowlist":[]}'
Exploit:
An attacker with the ability to modify Tlon settings (e.g., a compromised admin session or a malicious integration) can push an empty allowlist after a legitimate deny‑all revocation. The reconciliation engine will treat the empty list as unset, restoring the previous permissive allowlist without triggering an alert. The attacker then retains unauthorized access that should have been revoked.
Protection from this CVE
Upgrade OpenClaw to version v2026.3.22 or later. If immediate upgrade is not possible, avoid pushing settings updates that include an empty allowlist until the patched version is deployed. Monitor audit logs for unexpected allowlist changes.
Impact
Low – The vulnerability allows an intended access revocation to be silently undone, potentially leaving systems exposed when an administrator believes access has been fully denied. Exploitation requires the ability to issue a Tlon settings update, limiting the attack surface.
🎯Let’s Practice Exploiting & Learn Patching For Free:
Sources:
Reported By: github.com
Extra Source Hub:
Undercode
