PT-2026-29226 · Openclaw · Openclaw

Tdjackey · Published 2026-03-13 · Updated 2026-04-09 · CVE-2026-32916

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OpenClaw versions 2026.3.7 through 2026.3.10

Description The software contains an authorization bypass issue where plugin subagent routes execute gateway methods using a synthetic operator client with extensive administrative permissions. Unauthenticated remote requests to routes owned by plugins can trigger runtime.subagent methods, enabling privileged gateway actions such as session deletion and agent execution.

Recommendations Update to version 2026.3.11 or later.

Fix

Improper Authorization

Incorrect Privilege Assignment

Improper Privilege Management

Weakness Enumeration

CWE-285

CWE-266

CWE-269

Related Identifiers

CVE-2026-32916

GHSA-PHGF-3849-RGJQ

GHSA-XW77-45GV-P728

Affected Products

Openclaw

References · 11

• https://github.com/openclaw/openclaw/security/advisories/GHSA-xw77-45gv-p728 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-32916 · Security Note
• https://osv.dev/vulnerability/GHSA-xw77-45gv-p728 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-phgf-3849-rgjq · Vendor Advisory
• https://github.com/openclaw/openclaw · Note
• https://github.com/openclaw/openclaw/releases/tag/v2026.3.11 · Note
• https://twitter.com/CVEnew/status/2039004491458973990 · Twitter Post
• https://twitter.com/0dayPublishing/status/2039008451943100657 · Twitter Post
• https://twitter.com/everythingLLM/status/2042185131579097130 · Twitter Post
• https://vulncheck.com/advisories/openclaw-authorization-bypass-in-plugin-subagent-routes-via-synthetic-admin-scopes · Note
• https://twitter.com/TheHackerWire/status/2039236322683142472 · Twitter Post