CVE-2026-108757 Details

A missing authentication vulnerability has been identified in the Nexting Pinclaw OpenClaw channel plugin, affecting versions through 0.3.0. The vulnerability resides in the HTTP router, specifically in the POST /pinclaw/send endpoint, where the authToken check is omitted. This flaw allows unauthenticated attackers to send blind prompts that are injected into the user's main OpenClaw agent session as user instructions. The issue arises because the HTTP server listens on port 18790, binding to all interfaces by default, thereby exposing the vulnerability to remote exploitation.

To address this vulnerability, implement an authentication check on the /pinclaw/send route to ensure that requests include a valid authToken. This can be done by reading the token from the request body or authorization header and comparing it to the expected value. Additionally, consider binding the HTTP server to localhost by default to restrict access, and remove the wildcard CORS header from state-changing routes.