A critical access control bypass vulnerability in OpenClaw allows authenticated attackers to manipulate profile settings and circumvent security restrictions, posing a significant risk to organizational policy enforcement.

The software contains an access control bypass flaw stemming from the improper handling of immutable web parameters. An authenticated attacker can exploit this by performing persistent profile mutation and runtime profile selection to access restricted browser proxy configurations.

The ability to bypass intended access controls undermines the integrity of organizational security policies regarding network traffic and proxy usage. Successful exploitation could lead to unauthorized data exfiltration or access to restricted internal resources, potentially violating compliance requirements. Given the CVSS score of 8.1, this vulnerability represents a high-severity risk that could facilitate further unauthorized actions within the network environment.

Immediate Action: Update the OpenClaw package to version 2026.3.22 or later to resolve the underlying access control logic error.

Proactive Monitoring: Monitor application and proxy logs for unusual profile mutation activity or unauthorized attempts to access restricted proxy configurations during runtime.

Compensating Controls: Implement strict network-level egress filtering to restrict unauthorized proxy traffic if immediate patching is not possible.

Public Exploit Available: Unknown.

This vulnerability presents a significant risk to internal security controls and requires immediate attention. IT administrators should prioritize the deployment of version 2026.3.22 across all affected instances to eliminate the possibility of unauthorized profile manipulation. Failure to patch may result in the degradation of network security posture and potential unauthorized access to restricted segments.