PT-2026-35559 · Openclaw · Openclaw

Peng Zhou · Published 2026-04-27 · Updated 2026-06-05 · CVE-2026-41371

Positive Technologies (AI Summary)

CVSS v3.1

8.5

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:L

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.3.28

Description Improper authorization checks in the 'chat.send' path allow write-scoped gateway callers to perform admin-only session reset operations. This enables attackers to rotate target sessions, archive previous transcript states, and force the generation of new session IDs without possessing the required admin scope.

Recommendations Update to version 2026.3.28 or later. As a temporary workaround, restrict access to the 'chat.send' function to minimize the risk of unauthorized session resets.

Fix

LPE

RCE

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2026-41371

Affected Products

Openclaw

References · 9

• https://github.com/openclaw/openclaw/security/advisories/GHSA-5r8f-96gm-5j6g · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-41371 · Security Note
• https://twitter.com/Tank23x0/status/2062958380684394917 · Twitter Post
• https://vulncheck.com/advisories/openclaw-privilege-escalation-via-chat-send-reset-command · Note
• https://twitter.com/VulmonFeeds/status/2049055163512435183 · Twitter Post
• https://reddit.com/r/pwnhub/comments/1syn4iy/critical_privilege_escalation_vulnerability · Reddit Post
• https://twitter.com/CCBalert/status/2049132470788874713 · Twitter Post
• https://t.me/CVEtracker/52013 · Telegram Post
• https://twitter.com/CVEarity/status/2049052360950026376 · Twitter Post