An authorization bypass vulnerability in OpenClaw allows authenticated users with operator permissions to execute restricted owner-only tasks, posing a significant risk to environment integrity.

The flaw is an incorrect authorization issue (CWE-863) where the application fails to properly gate owner-only tool surfaces, such as gateway and cron, during agent execution. This allows an authenticated user with operator.write scope to invoke privileged functions they are not authorized to access.

Successful exploitation allows an authenticated attacker to perform unauthorized control-plane actions, potentially leading to a total compromise of the affected agent environment. Given the CVSS score of 8.8, this high-severity vulnerability represents a substantial risk to operational security, as it facilitates privilege escalation and unauthorized manipulation of critical system infrastructure.

Immediate Action: Update the OpenClaw package to version 2026.3.1 or later to implement the necessary authorization checks.

Proactive Monitoring: Audit agent execution logs for unexpected invocations of gateway or cron functions originating from accounts with limited operator scopes.

Compensating Controls: Review and restrict access to the operator.write scope, ensuring that only users with an absolute business necessity maintain the ability to trigger agent runs until the patch is applied.

Public Exploit Available: Unknown

The vulnerability presents a high risk for environments relying on OpenClaw for automated task management. Administrators should prioritize updating to version 2026.3.1 immediately to close the authorization gap and prevent unauthorized access to the control plane. Failure to remediate could allow malicious actors with legitimate but limited access to escalate their impact significantly.