GHSA-2rgf-hm63-5qph: OpenClaw improperly parses X-Forwarded-For behind trusted proxies allows client IP spoofing in security decisions
OpenClaw used left-most X-Forwarded-For values when requests came from configured trusted proxies. In proxy chains that append/preserve header values, this could let attacker-controlled header content influence security decisions tied to client IP.
References
Code Behaviors & Features
Detect and mitigate GHSA-2rgf-hm63-5qph with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →