4118ÔÆ¶¥¼¯ÍÅ

֤ȯ¼ò³Æ£º4118ÔÆ¶¥¼¯ÍŠ֤ȯ´úÂ룺002212
7x24Сʱ·þÎñ£º 400-777-0777

4118ÔÆ¶¥¼¯ÍÅ·¢Ã÷OpenClaw¸ßΣÎó²î²¢Íê³É·À»¤ÄÜÁ¦¼¯³É

¿ËÈÕ£¬4118ÔÆ¶¥¼¯ÍŰ¢¶û·¨ÊµÑéÊÒ·¢Ã÷OpenClaw¶à¸öÎó²î£¬²¢ÒѵÚһʱ¼äÏòOpenClaw¹Ù·½±¨¸æÎó²îϸ½Ú£¬Í¬²½Ìá½»CNVD¡¢CNNVD¡¢NVDB-CAIVDµÈ¹ú¼ÒÎó²î¿âƽ̨¡£

4118ÔÆ¶¥¼¯ÍÅ·¢Ã÷OpenClaw¸ßΣÎó²î²¢Íê³É·À»¤ÄÜÁ¦¼¯³É

Ðû²¼Ê±¼ä£º2026-03-30
ä¯ÀÀ´ÎÊý£º2613
·ÖÏí£º

OpenClawÎó²î

¿ËÈÕ£¬4118ÔÆ¶¥¼¯ÍŰ¢¶û·¨ÊµÑéÊÒ·¢Ã÷OpenClaw¶à¸öÎó²î£¬²¢ÒѵÚһʱ¼äÏòOpenClaw¹Ù·½±¨¸æÎó²îϸ½Ú£¬Í¬²½Ìá½»CNVD¡¢CNNVD¡¢NVDB-CAIVDµÈ¹ú¼ÒÎó²î¿âƽ̨¡£

ÆäÖÐOpenClaw Gateway WebSocketÔ¤ÈÏÖ¤¾Ü¾ø·þÎñÎó²îÒÑ»ñ¹Ù·½È·ÈÏ£¨Ç徲ͨ¸æGHSA-f44p-c7w9-7xr7£©£¬4118ÔÆ¶¥¼¯ÍÅÈ«³ÌЭÖúOpenClawÍê³ÉÏà¹ØÐÞ¸´ÊÂÇé¡£

¸ÃÎó²îÔÊÐí¹¥»÷ÕßÔÚδÈÏ֤״̬Ï£¬Ô¶³ÌÇжÏÓû§ÓëÆäOpenClawʵÀýÖ®¼äµÄËùÓÐͨѶͨµÀ¡£ÈκÎÄÜ»á¼ûµ½OpenClaw Gateway¶Ë¿ÚµÄ¹¥»÷Õߣ¬¾ù¿ÉʹÓøÃÎó²îʹĿµÄʵÀýÍêȫʧÁª£¬ÏêϸÌåÏÖΪÊÖ»úAppÎÞ·¨Ï·¢¿ØÖÆÖ¸Áî¡¢CLIÏÂÁîÖ´ÐÐʧ°Ü¡¢Node½Úµã¶ÏÁªµÈ£¬Ó°ÏìÈ«ÇòÔ¼23ÍòÔÚÏßOpenClawÓû§¡£

Îó²îÃû³Æ

OpenClaw Gateway WebSocketÔ¤ÈÏÖ¤¾Ü¾ø·þÎñÎó²î£¨OpenClaw Gateway WebSocket denial of service via unbounded pre-auth upgrades£©

Îó²î±àºÅ

ÔÝÎÞ

Îó²îÆ·¼¶

¸ßΣ

Îó²îΣº¦

¹¥»÷ÕßÎÞÐèÈÎºÎÆ¾Ö¤£¬Ö»ÒªÄܹ»»á¼ûGateway¶Ë¿Ú£¨Í¨³£ÎªÍøÂç¿É´ï£©£¬¼´¿ÉʹÓôËÎó²îÇжÏÓû§ÓëÆäOpenClawʵÀýÖ®¼äµÄËùÓÐͨѶÁ´Â·¡£

ÊÜÓ°Ïì°æ±¾

OpenClaw<=2026.3.24

ÐÞ¸´½¨Òé

¹Ù·½ÒÑÐû²¼Çå¾²°æ±¾£¬ÇëÊÜÓ°ÏìÓû§¾¡¿ìÉý¼¶ÖÁÇå¾²°æ±¾£ºOpenClaw2026.3.28

²Î¿¼Á´½Ó

https://github.com/openclaw/openclaw/security/advisories/GHSA-f44p-c7w9-7xr7

ÔÚÒ»Á¬¿ªÕ¹Îó²îÉî¶ÈÍÚ¾òÓëΣº¦ÑÐÅеÄͬʱ£¬4118ÔÆ¶¥¼¯ÍÅÒÑͬ²½Íê³ÉÕë¶ÔÐÔ·ÀÓùÄÜÁ¦µÄ¼¯³É¡£ÏÖÔÚ£¬4118ÔÆ¶¥¼¯ÍÅÏÂÒ»´ú·À»ðǽ¡¢ÈëÇÖ¼ì²â¡¢»ðÑæÍþв¼ì²âϵͳµÈ²úÆ·ÒѼ¯³ÉÕë¶Ô´ËÀàÔ¤ÈÏÖ¤WebSocket×ÊÔ´ºÄ¾¡¹¥»÷µÄרÊô¼ì²âÄ£×Ó£¬¿ÉÓÐÓÃʶ±ð²¢×èµ²´ó¹æÄ£Î´ÈÏÖ¤WebSocketÉý¼¶ÇëÇó£¬È·±£¼´±ãÔâÓö¸ßÇ¿¶ÈÍ»·¢¹¥»÷¹¥»÷£¬Ò²ÄÜÎȹÌÊØ»¤ÓªÒµµ×²ã¼Ü¹¹£¬°ü¹ÜÆóÒµ½¹µãÓªÒµÁ´Â·²»ÊÜÈŶ¯¡¢Ò»Á¬Æ½ÎÈÔËÐС£

δÀ´£¬4118ÔÆ¶¥¼¯ÍŽ«Ò»Á¬ÉÓëÈ«Çò¿ªÔ´Çå¾²ÉçÇøµÄÉú̬Áª¶¯¡¢ÊÖÒÕ¹²½¨ÓëЭͬ»¥Í¨£¬¾ÛÁ¦º»ÊµÊý×ÖÇå¾²µ××ù£¬ÎªÐÞ½¨Îȹ̡¢¿ÉÐÅ¡¢Çå¾²µÄÈ«ÇòÊý×Ö»ù´¡ÉèÊ©Éú̬һÁ¬Ð¢Ë³ÆóÒµÁ¦Á¿¡£

Ïà¹ØÔĶÁ

1¡¢´Ó472ÆðÊÂÎñ½âÂë2025Íþвȫ¾°£º¹¥»÷½øÈë¾«×¼ÉøÍ¸Ê±´ú£¨¸½ÏÂÔØ£©

2¡¢¡¸Apifox¡¢LiteLLM¡¢Context Hub¡¹AI¹©Ó¦Á´Í¶¶¾ÊÂÎñÆÊÎö£¨¸½ÏÂÔØ£©

3¡¢ÈÃΣº¦¡°¿É¼û¡±£¡4118ÔÆ¶¥¼¯ÍÅÐû²¼OpenClawÇå¾²ÆÀ¹À·þÎñ

4¡¢4118ÔÆ¶¥¼¯ÍÅ£ºOpenClawÔËÐлúÖÆÓëÇå¾²ÍþвÑо¿±¨¸æ£¨¸½ÏÂÔØ£©

¿Í»§·þÎñÈÈÏß

400-777-0777
7*24Сʱ·þÎñ

ÁªÏµÓÊÏä

servicing@topsec.com.cn

ɨÂë¹Ø×¢
ÍøÕ¾µØÍ¼