A critical authorization bypass vulnerability in OpenClaw allows authenticated operators to spoof identity labels, leading to potential integrity compromise.

This vulnerability is a reliance on untrusted inputs in a security decision (CWE-807). Authenticated operator clients can exploit the chat.send gateway method by injecting reserved provenance fields that are incorrectly gated by client-supplied WebSocket metadata rather than verified server-side state.

The ability to spoof identity labels within the chat gateway allows an attacker to masquerade as an ACP bridge, which could lead to unauthorized data injection or control flow manipulation. Given the CVSS score of 7.1, this vulnerability poses a significant risk to the integrity of internal communications and administrative operations. Failure to address this could result in unauthorized administrative actions and a breach of system trust.

Immediate Action: Update the OpenClaw package to version 2026.3.28 or later to ensure proper server-side verification of identity claims.

Proactive Monitoring: Review WebSocket traffic and chat gateway logs for anomalous provenance labels or unexpected identity header modifications originating from operator accounts.

Compensating Controls: Implement strict network-level controls and monitor WebSocket connections for patterns associated with metadata injection attempts.

Public Exploit Available: Unknown

This vulnerability represents a significant security flaw that undermines the authorization model of the OpenClaw platform. Security teams should prioritize patching affected instances to version 2026.3.28 immediately to eliminate the risk of identity spoofing. Ongoing monitoring of operator activity is advised until the patch is successfully deployed across all production environments.