CVE-2026-32051

HIGH

OpenClaw < 2026.3.1 - Authorization Bypass in Agent Runs via Owner-Only Tool Access

Title source: cna

Description

OpenClaw versions prior to 2026.3.1 contain an authorization mismatch vulnerability that allows authenticated callers with operator.write scope to invoke owner-only tool surfaces including gateway and cron through agent runs in scoped-token deployments. Attackers with write-scope access can perform control-plane actions beyond their intended authorization level by exploiting inconsistent owner-only gating during agent execution.

References (2)

[Third Party Advisory] https://github.com/openclaw/openclaw/security/advisories/GHSA-jr6x-2q95-fh2g

[Third Party Advisory] https://www.vulncheck.com/advisories/openclaw-authorization-bypass-in-agent-runs-via-owner-only-tool-access

Scores

CVSS v3 8.8

EPSS 0.0008

EPSS Percentile 23.1%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-863

Status published

Products (3)

OpenClaw/OpenClaw < 2026.3.1

openclaw/openclaw < 2026.3.1

OpenClaw/OpenClaw 2026.3.1

Published Mar 21, 2026

Tracked Since Mar 21, 2026