OpenClawÎó²î
¿ËÈÕ£¬4118ÔÆ¶¥¼¯ÍŰ¢¶û·¨ÊµÑéÊÒ·¢Ã÷OpenClaw¶à¸öÎó²î£¬²¢ÒѵÚһʱ¼äÏòOpenClaw¹Ù·½±¨¸æÎó²îϸ½Ú£¬Í¬²½Ìá½»CNVD¡¢CNNVD¡¢NVDB-CAIVDµÈ¹ú¼ÒÎó²î¿âƽ̨¡£
ÆäÖÐOpenClaw Gateway WebSocketÔ¤ÈÏÖ¤¾Ü¾ø·þÎñÎó²îÒÑ»ñ¹Ù·½È·ÈÏ£¨Ç徲ͨ¸æGHSA-f44p-c7w9-7xr7£©£¬4118ÔÆ¶¥¼¯ÍÅÈ«³ÌÐÖúOpenClawÍê³ÉÏà¹ØÐÞ¸´ÊÂÇé¡£

¸ÃÎó²îÔÊÐí¹¥»÷ÕßÔÚδÈÏ֤״̬Ï£¬Ô¶³ÌÇжÏÓû§ÓëÆäOpenClawʵÀýÖ®¼äµÄËùÓÐͨѶͨµÀ¡£ÈκÎÄÜ»á¼ûµ½OpenClaw Gateway¶Ë¿ÚµÄ¹¥»÷Õߣ¬¾ù¿ÉʹÓøÃÎó²îʹĿµÄʵÀýÍêȫʧÁª£¬ÏêϸÌåÏÖΪÊÖ»úAppÎÞ·¨Ï·¢¿ØÖÆÖ¸Áî¡¢CLIÏÂÁîÖ´ÐÐʧ°Ü¡¢Node½Úµã¶ÏÁªµÈ£¬Ó°ÏìÈ«ÇòÔ¼23ÍòÔÚÏßOpenClawÓû§¡£
Îó²îÃû³Æ
OpenClaw Gateway WebSocketÔ¤ÈÏÖ¤¾Ü¾ø·þÎñÎó²î£¨OpenClaw Gateway WebSocket denial of service via unbounded pre-auth upgrades£©
Îó²î±àºÅ
ÔÝÎÞ
Îó²îÆ·¼¶
¸ßΣ
Îó²îΣº¦
¹¥»÷ÕßÎÞÐèÈÎºÎÆ¾Ö¤£¬Ö»ÒªÄܹ»»á¼ûGateway¶Ë¿Ú£¨Í¨³£ÎªÍøÂç¿É´ï£©£¬¼´¿ÉʹÓôËÎó²îÇжÏÓû§ÓëÆäOpenClawʵÀýÖ®¼äµÄËùÓÐͨѶÁ´Â·¡£
ÊÜÓ°Ïì°æ±¾
OpenClaw<=2026.3.24
ÐÞ¸´½¨Òé
¹Ù·½ÒÑÐû²¼Çå¾²°æ±¾£¬ÇëÊÜÓ°ÏìÓû§¾¡¿ìÉý¼¶ÖÁÇå¾²°æ±¾£ºOpenClaw2026.3.28
²Î¿¼Á´½Ó
https://github.com/openclaw/openclaw/security/advisories/GHSA-f44p-c7w9-7xr7
ÔÚÒ»Á¬¿ªÕ¹Îó²îÉî¶ÈÍÚ¾òÓëΣº¦ÑÐÅеÄͬʱ£¬4118ÔÆ¶¥¼¯ÍÅÒÑͬ²½Íê³ÉÕë¶ÔÐÔ·ÀÓùÄÜÁ¦µÄ¼¯³É¡£ÏÖÔÚ£¬4118ÔÆ¶¥¼¯ÍÅÏÂÒ»´ú·À»ðǽ¡¢ÈëÇÖ¼ì²â¡¢»ðÑæÍþв¼ì²âϵͳµÈ²úÆ·ÒѼ¯³ÉÕë¶Ô´ËÀàÔ¤ÈÏÖ¤WebSocket×ÊÔ´ºÄ¾¡¹¥»÷µÄרÊô¼ì²âÄ£×Ó£¬¿ÉÓÐÓÃʶ±ð²¢×èµ²´ó¹æÄ£Î´ÈÏÖ¤WebSocketÉý¼¶ÇëÇó£¬È·±£¼´±ãÔâÓö¸ßÇ¿¶ÈÍ»·¢¹¥»÷¹¥»÷£¬Ò²ÄÜÎȹÌÊØ»¤ÓªÒµµ×²ã¼Ü¹¹£¬°ü¹ÜÆóÒµ½¹µãÓªÒµÁ´Â·²»ÊÜÈŶ¯¡¢Ò»Á¬Æ½ÎÈÔËÐС£

δÀ´£¬4118ÔÆ¶¥¼¯ÍŽ«Ò»Á¬ÉÓëÈ«Çò¿ªÔ´Çå¾²ÉçÇøµÄÉú̬Áª¶¯¡¢ÊÖÒÕ¹²½¨ÓëÐͬ»¥Í¨£¬¾ÛÁ¦º»ÊµÊý×ÖÇå¾²µ××ù£¬ÎªÐÞ½¨Îȹ̡¢¿ÉÐÅ¡¢Çå¾²µÄÈ«ÇòÊý×Ö»ù´¡ÉèÊ©Éú̬һÁ¬Ð¢Ë³ÆóÒµÁ¦Á¿¡£
Ïà¹ØÔĶÁ
1¡¢´Ó472ÆðÊÂÎñ½âÂë2025Íþвȫ¾°£º¹¥»÷½øÈë¾«×¼ÉøÍ¸Ê±´ú£¨¸½ÏÂÔØ£©
2¡¢¡¸Apifox¡¢LiteLLM¡¢Context Hub¡¹AI¹©Ó¦Á´Í¶¶¾ÊÂÎñÆÊÎö£¨¸½ÏÂÔØ£©
3¡¢ÈÃΣº¦¡°¿É¼û¡±£¡4118ÔÆ¶¥¼¯ÍÅÐû²¼OpenClawÇå¾²ÆÀ¹À·þÎñ
4¡¢4118ÔÆ¶¥¼¯ÍÅ£ºOpenClawÔËÐлúÖÆÓëÇå¾²ÍþвÑо¿±¨¸æ£¨¸½ÏÂÔØ£©

¾©¹«Íø°²±¸ 11010802026257ºÅ