Executive brief
OpenClaw is a gateway and plugin management system. A security flaw in its session management component allows users with low-level access to perform administrative session deletions. This could lead to unauthorized service disruptions or the termination of other users' active sessions, potentially impacting operational stability.
Technical details
An incorrect authorization vulnerability exists in the OpenClaw gateway plugin's subagent fallback mechanism. When a request-scoped client is missing, the `deleteSession` function incorrectly dispatches `sessions.delete` using a synthetic `operator.admin` runtime scope. This allows an authenticated attacker with low privileges to bypass intended access controls and delete sessions as an administrator. The issue was addressed by binding the deletion action to the actual caller's scope instead of granting a hardcoded admin scope. Patches are available in version 2026.3.25 and later.
Affected products
- openclaw openclaw <= 2026.3.24
Timeline
- 2026-03-26: disclosed: Initial disclosure by reporter
- 2026-03-29: advisory: GitHub Advisory published
- 2026-03-25: patched: Fix commit b5d785f1a59a56c3471f2cef328f7c9a6c15f3e7 merged