Privilege Escalation Vulnerability in OpenClaw Package: Gateway Plugin Subagent Fallback Issue
Summary
GHSA-m5jp-p3r5-mfqp: Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-h4jx-hjr3-fhgc. Affects openclaw versions < 2026.3.24. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
OpenClaw is an open-source package designed for managing and orchestrating various services through a gateway plugin architecture. It allows developers to create subagents that can handle different functionalities, enhancing the modularity and scalability of applications. However, prior to version 2026.3.25, OpenClaw had a critical vulnerability that could allow unauthorized users to escalate their privileges and perform administrative operations without proper authorization.
Vulnerability Detail
The vulnerability arises from the gateway plugin subagent fallback deleteSession function, which improperly uses a synthetic operator.admin runtime scope. This flaw enables attackers to trigger session deletions without a request-scoped client, allowing them to execute privileged operations with unintended administrative scope. The potential ramifications include unauthorized access to sensitive data and the ability to manipulate system settings, leading to severe security breaches.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, consider restricting access to the deleteSession function by implementing additional authentication checks or limiting its exposure within your application until the package can be updated.
Conclusion
The privilege escalation vulnerability in OpenClaw's gateway plugin subagent fallback deleteSession function poses a significant risk to applications using this package. It is crucial to update to the latest version to mitigate potential security threats. Utilizing tools like Vulert can help monitor and manage vulnerabilities effectively.
See every vulnerability recorded for openclaw →
FAQ
The CVSS score of this vulnerability is 8.1, indicating a high severity level.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in real-time. Visit the Vulert playground at Vulert Scanner to check your application without any signup.
Failure to address this vulnerability may lead to unauthorized access and manipulation of sensitive data and system settings, posing significant security risks.
Yes, you should upgrade to OpenClaw version 2026.3.25 or later to ensure that the vulnerability is patched.
Yes, you can implement additional authentication checks or limit access to the deleteSession function as a temporary workaround.
References
Related vulnerabilities
Recent vulnerabilities recorded for openclaw.
