Privilege Escalation Vulnerability in OpenClaw Package
Summary
GHSA-58wc-8wrv-xp9j: Duplicate Advisory: Active Memory write scope could mutate global config. Affects openclaw versions < 2026.5.5. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
OpenClaw is an open-source package designed for managing and controlling various aspects of application gateways. It provides functionalities for operators to manage configurations and access controls. However, prior to version 2026.5.6, OpenClaw had a critical vulnerability that allowed users with limited write access to alter global configurations, potentially leading to unauthorized changes and privilege escalation.
Vulnerability Detail
The vulnerability in OpenClaw arises from insufficient scope validation in the Active Memory write scope. This flaw allows Gateway operators with 'operator.write' access to modify global configuration settings without needing 'operator.admin' privileges. As a result, attackers with write access can exploit this vulnerability to make unauthorized configuration changes, which could compromise the integrity and security of the application.
How To Fix
No fixed version is published for this vulnerability.
To rectify this vulnerability, it is recommended to update OpenClaw to version 2026.5.6 or later. You can update the package using the following command in your terminal: npm update openclaw. This will ensure that you are using a version of the package that has addressed the identified security issues.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
While the best course of action is to update to the patched version, if immediate updating is not feasible, consider restricting access to the 'operator.write' permissions until the update can be applied. This can help mitigate the risk of unauthorized configuration changes.
Conclusion
The privilege escalation vulnerability in OpenClaw poses a significant risk to users with limited write access, allowing unauthorized modifications to global configurations. It is crucial to update to version 2026.5.6 or later to mitigate this risk effectively. Additionally, using tools like Vulert can help monitor for such vulnerabilities in real-time.
See every vulnerability recorded for openclaw →
FAQ
The CVSS score of this vulnerability is 5.4, indicating a moderate severity level.
OpenClaw versions prior to 2026.5.6 are affected by this vulnerability.
You can use Vulert to monitor and alert for open-source vulnerabilities in your software. By utilizing the Vulert playground, you can check if your application is affected by this vulnerability without any signup.
If you cannot update the package right away, restrict access to 'operator.write' permissions as a temporary measure to reduce the risk of unauthorized changes.
More information about OpenClaw can typically be found in its official documentation or repository on platforms like GitHub.
Related vulnerabilities
Recent vulnerabilities recorded for openclaw.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.