Critical Authorization Bypass in OpenClaw: WebSocket Shared-Auth Connections
Summary
GHSA-x49q-fhhm-r9jf: Duplicate Advisory: OpenClaw: WebSocket shared-auth connections could self-declare elevated scopes. Affects openclaw versions < 2026.3.12. Fixed in 2026.3.12. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
OpenClaw is an open-source framework designed for building web applications with real-time capabilities. It leverages WebSocket technology to facilitate bi-directional communication between clients and servers. However, versions prior to 2026.3.12 are susceptible to a critical vulnerability that allows unauthorized elevation of user permissions through shared-token or password-authenticated connections.
Vulnerability Detail
The vulnerability arises from a logic flaw in the WebSocket connection process, where shared-token or password-authenticated connections can self-declare elevated scopes without proper server-side validation. This flaw allows attackers to exploit the system by presenting unauthorized scopes, such as 'operator.admin', enabling them to perform administrative operations that should be restricted. The potential ramifications include unauthorized access to sensitive operations and data manipulation, posing a significant security risk.
How To Fix
Latest published version: 2026.10.6 as of 22 Oct 2026
npm install openclaw@2026.10.6Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
2026.3.12
This is the first release that contains the fix.
npm install openclaw@2026.3.12Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, you can restrict access to the WebSocket connection by implementing additional server-side checks to validate user permissions before allowing elevated scopes. However, this is not a substitute for applying the official patch.
Conclusion
The OpenClaw vulnerability presents a significant risk due to its potential for unauthorized access through WebSocket shared-auth connections. Immediate action is recommended to update to the patched version to safeguard your application from exploitation.
See every vulnerability recorded for openclaw →
FAQ
The CVSS score of this vulnerability is 9.9, indicating a critical level of severity.
All versions of OpenClaw prior to 2026.3.12 are affected by this vulnerability.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in your software. By analyzing your package-lock.json file, Vulert can provide real-time alerts. You can also check your application using the Vulert playground without any signup.
The vulnerability could allow attackers to gain unauthorized access to administrative functionalities, potentially leading to data breaches and manipulation of sensitive information.
While the best course of action is to apply the patch, you can implement additional server-side checks to validate user permissions as a temporary workaround.
Related vulnerabilities
Recent vulnerabilities recorded for openclaw.
