An authorization bypass vulnerability in OpenClaw allows authenticated operators to escape restricted workspace boundaries, leading to potential unauthorized file and process execution.

This vulnerability is an exposure of resources to the wrong sphere (CWE-668) within the gateway agent RPC, which can be triggered by an authenticated operator with operator.write permissions to override workspace boundaries. By manipulating the spawnedBy and workspaceDir parameters, an attacker can escape the intended sandbox and execute arbitrary system operations.

The vulnerability carries a CVSS score of 8.8, reflecting its high impact on confidentiality, integrity, and availability within the affected environment. Successful exploitation allows an attacker to break out of their assigned workspace, potentially leading to unauthorized data access, system-wide file manipulation, and the execution of arbitrary commands, which poses a significant risk to organizational infrastructure and data security.

Immediate Action: Update the OpenClaw package to version 2026.3.11 or later to apply the necessary authorization checks and boundary enforcement.

Proactive Monitoring: Review RPC gateway logs for unusual administrative activity, specifically focusing on unexpected values within the spawnedBy or workspaceDir parameter fields.

Compensating Controls: Implement strict access control policies to limit the number of users with operator.write privileges and use network segmentation to isolate the gateway agent from sensitive internal resources.

Public Exploit Available: No.

Given the severity of this authorization bypass, organizations should prioritize the immediate update of all OpenClaw instances to version 2026.3.11. This update effectively closes the gap that allows for workspace escape and unauthorized system operations, ensuring the integrity of the gateway agent environment.