Executive brief
OpenClaw is a Node.js framework used for building scalable applications with gateway plugins. A privilege escalation vulnerability in the gateway plugin's session deletion function allows attackers with low-level access to execute privileged administrative operations by triggering session deletion without proper authorization checks. This could allow an attacker to modify or delete data, take over accounts, or disrupt service operations beyond their intended permissions.
Technical details
The vulnerability is a privilege escalation (CWE-863: Incorrect Authorization, CWE-266: Incorrect Privilege Assignment) in the gateway plugin subagent fallback deleteSession function. When no request-scoped client exists, the function dispatches session deletion with a synthetic operator.admin runtime scope, allowing any caller to perform administrative operations. The attack requires an authenticated user (PR:L) but no user interaction, and is network-accessible. An attacker can trigger session deletion to execute privileged operations unintended for their role. The vulnerability affects all versions up to 2026.3.24; fix available in commit b5d785f1a59a56c3471f2cef328f7c9a6c15f3e7 released as version 2026.3.25.
Affected products
- OpenClaw openclaw <= 2026.3.24
Timeline
- 2026-04-10: disclosed: Advisory GHSA-m5jp-p3r5-mfqp published (duplicate)
- 2026-04-18: other: Advisory withdrawn as duplicate of GHSA-h4jx-hjr3-fhgc
- 2026-03-26: other: Original advisory GHSA-h4jx-hjr3-fhgc published
- 2026-03-25: patched: Version 2026.3.25 released with fix (commit b5d785f1a59a56c3471f2cef328f7c9a6c15f3e7)