Critical Vulnerability in OpenClaw: Gateway Backend Reconnect Allows Non-Admin Operators to Self-Claim Admin Privileges
Summary
GHSA-9hjh-fr4f-gxc4: OpenClaw: Gateway Backend Reconnect lets Non-Admin Operator Scopes Self-Claim operator.admin. Affects openclaw versions < 2026.3.24. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
OpenClaw is an open-source package designed to facilitate gateway backend operations, enabling seamless communication and management of connected devices. It provides a robust framework for operators to manage device interactions while maintaining security protocols. However, a critical vulnerability has been identified that allows non-admin operators to escalate their privileges, posing significant security risks.
Vulnerability Detail
The vulnerability arises from the Gateway Backend Reconnect feature, which previously allowed non-admin operator scopes to self-request broader permissions, specifically the 'operator.admin' scope. This bypassed the necessary pairing process, enabling unauthorized access to admin-level functionalities. The issue was traced back to a flaw in the backend's handling of reconnect requests, which did not enforce strict scope checks. As a result, malicious actors could exploit this weakness to gain elevated privileges, potentially leading to unauthorized control over the system.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, administrators can restrict access to the reconnect functionality for non-admin operators until the package is updated. This can be done by modifying the access control settings in the application configuration to limit scope requests.
Conclusion
In summary, the identified vulnerability in OpenClaw poses a significant risk by allowing non-admin operators to gain unauthorized admin privileges. It is crucial to update to the latest version to mitigate this risk and ensure the security of your application. Utilizing tools like Vulert can further enhance your monitoring capabilities for open-source vulnerabilities.
See every vulnerability recorded for openclaw →
FAQ
The vulnerability allows non-admin operators to self-claim admin privileges, bypassing security protocols.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without any signup.
The CVSS score of this vulnerability is 9.3, indicating a critical level of severity.
Update the OpenClaw package to version 2026.3.25 or later using the command: npm install openclaw@2026.3.25.
Yes, Vulert can monitor and alert you in real-time for open-source vulnerabilities in your software using just package-lock.json.
References
Related vulnerabilities
Recent vulnerabilities recorded for openclaw.
