An authorization bypass vulnerability in OpenClaw allows authenticated operators to escalate privileges and manipulate browser profiles, posing a significant risk to system configuration integrity.

This flaw is an incorrect authorization issue (CWE-863) where authenticated users with limited operator.write permissions can bypass security checks to access admin-only browser profile management endpoints. By interacting with the browser.request function, an attacker can modify profiles and persist remote CDP endpoints without the required operator.admin privileges.

Successful exploitation allows unauthorized modification of browser profiles and the persistence of attacker-controlled remote endpoints, which could lead to complete control over browser sessions or potential data exfiltration. With a CVSS score of 7.1, this represents a high-severity risk to the confidentiality and integrity of the application environment. Unauthorized access to administrative functions often serves as a primary vector for further lateral movement or persistent compromise of the host system.

Immediate Action: Update the OpenClaw package to version 2026.3.11 or later immediately to resolve the underlying authorization flaw.

Proactive Monitoring: Review audit logs for any suspicious activity involving the browser.request endpoint or unusual modifications to browser profile configurations.

Compensating Controls: Implement strict access control lists or network segmentation to limit the reach of accounts possessing operator.write privileges until the patch is deployed.

Public Exploit Available: Unknown.

Given the ability for lower-privileged users to access sensitive administrative routes, this vulnerability poses a critical threat to the security posture of the OpenClaw deployment. Administrators should prioritize the deployment of version 2026.3.11 across all production environments. Failure to address this vulnerability allows malicious actors with limited access to escalate their control over the application infrastructure significantly.