A missing authentication flaw in OpenClaw allows unauthorized local actors or processes to execute arbitrary browser-context actions, posing a significant risk to session integrity and system security.

The application fails to perform mandatory authentication checks on the /agent/act HTTP endpoint. This vulnerability allows an unauthenticated local attacker or malicious process to trigger privileged operations within the browser context.

The vulnerability carries a CVSS score of 8.4, reflecting a high severity due to the potential for total impact on confidentiality and integrity of the affected session. Successful exploitation could allow attackers to bypass security controls, leading to unauthorized access to sensitive user data or the execution of arbitrary browser-based commands, which may result in significant data compromise or administrative control over the application state.

Immediate Action: Upgrade OpenClaw to version 2026.2.12 or later to ensure the /agent/act endpoint correctly enforces authentication protocols.

Proactive Monitoring: Inspect system and application access logs for unusual or unauthorized requests directed at the /agent/act endpoint, particularly those originating from non-standard local processes.

Compensating Controls: If immediate patching is not feasible, restrict network access to the local agent port to only trusted processes or users, and utilize host-based firewalls to prevent unauthorized access to the affected HTTP route.

Public Exploit Available: No

Given the high severity of this authentication bypass, organizations must prioritize upgrading to the patched version of OpenClaw. Organizations that cannot immediately apply the update should implement strict local access controls to mitigate the risk of unauthorized command execution until the patch can be deployed.