A high-severity privilege escalation vulnerability in OpenClaw allows authenticated attackers to perform unauthorized administrative session resets, posing a significant risk to user account integrity.

The vulnerability is an incorrect authorization flaw (CWE-863) located in the chat.send function. An authenticated user with write-scoped gateway access can bypass intended privilege restrictions to trigger administrative session operations, including forced session rotation and transcript state modification.

The ability for non-administrative users to reset session IDs and manipulate transcript history allows for potential account takeover and unauthorized access to sensitive communications. With a CVSS score of 8.5, this vulnerability represents a high risk to organizational security, as it undermines the core authentication and authorization controls protecting user and administrative sessions.

Immediate Action: Update the OpenClaw package to version 2026.3.28 or later to incorporate the necessary authorization logic fixes.

Proactive Monitoring: Review application access logs for unusual patterns involving the chat.send endpoint, specifically looking for session rotation commands originating from non-administrative user accounts.

Compensating Controls: Implement strict Web Application Firewall (WAF) rules to restrict access to chat-related administrative functions, ensuring that only verified administrative roles can invoke sensitive session management parameters.

Public Exploit Available: No (There is no confirmed public exploit or weaponized code available for this vulnerability).

Given the severity of this privilege escalation flaw, administrators should prioritize updating OpenClaw to version 2026.3.28 immediately. Failure to patch allows authenticated users to bypass critical session security controls, which could lead to widespread unauthorized account access and data exposure.