Executive brief
OpenClaw is a media delivery and collaboration library used to manage outbound message queues and enforce access policies. When the delivery queue recovers after a restart, it could replay queued media messages without the original session context needed to enforce group access policies, potentially allowing media to be delivered to channels where it should have been restricted.
Technical details
The vulnerability is a missing access control context (CWE-862) in the delivery queue recovery mechanism. When OpenClaw restarts and recovers queued outbound media from storage, the recovered media replay process does not preserve or re-apply the original session context and group tool-policy enforcement that was in place when the media was initially queued. This means policy checks are bypassed during recovery. The vulnerability affects versions 2026.4.10 through 2026.4.13 and requires the application to restart or undergo queue recovery to be exploited. The fix, released in version 2026.4.14, persists the relevant session context alongside queue entries to ensure recovered media goes through proper policy validation.
Affected products
- OpenClaw openclaw 2026.4.10 to 2026.4.13
Timeline
- 2026-04-17: disclosed
- 2026-04-14: patched: Fix released in version 2026.4.14