Executive brief
OpenClaw is a library for managing sandboxed session hierarchies. A flaw in the `session_status` function allows sandboxed child sessions to bypass visibility controls by supplying a sessionId instead of an explicit session key, granting unauthorized access to parent or sibling sessions. This breaks the isolation model intended to protect sensitive operations in multi-tenant environments.
Technical details
The vulnerability is an authorization bypass (CWE-863) in OpenClaw's session visibility guard. The `session_status` function performs a visibility check before resolving a sessionId to a canonical session key; however, the visibility guard logic incorrectly re-checks the resolved key rather than the original input type, causing the guard to always pass after sessionId resolution. The vulnerability affects versions 2026.3.11 through 2026.3.24. A sandboxed agent with network access to the session_status endpoint can provide a sessionId parameter instead of an explicit agent key to bypass the visibility restriction and access parent or sibling sessions. Fix commit d9810811b6c3c9266d7580f00574e5e02f7663de enforces the visibility guard before sessionId resolution, patched in version 2026.3.25.
Affected products
- OpenClaw OpenClaw 2026.3.11 to 2026.3.24
Timeline
- 2026-03-29: disclosed
- 2026-03-25: patched: version 2026.3.25