OpenClaw's authorization mismatch allowed write-scope agent runs to reach owner-only tools
Key facts
- Attack vector
- —
- Privileges required
- —
- User interaction
- —
- Attack complexity
- —
- Impact type
- Privilege escalation, Security bypass
- Confidentiality · integrity · availability
- —
- Fix status
- Fixed
No CVSS vector from any source. Fix status from GitHub. Impact type from CWE-269 and CWE-862.
Summary
### Summary An authorization mismatch allowed authenticated callers with `operator.write` access to invoke owner-only tool surfaces (`gateway`, `cron`) through `agent` runs in scoped-token deployments. ### Impact On affected deployments, write-scoped callers could perform control-plane actions beyond intended write scope. ### Fix Owner-only gating is now enforced consistently for owner-only tool surfaces during agent execution, and tool scope classification was tightened to remove the privilege mismatch. ### Affected and Patched Versions - Affected: `<= 2026.2.26` - Patched: `2026.3.1`
Why it matters now
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | openclaw (npm) | before 2026.3.1 | 2026.3.1 | Patch available | GHSA-jr6x-2q95-fh2g |
- openclaw (npm) Vendor— Affected before 2026.3.1 Fixed in 2026.3.1 Patch available GHSA-jr6x-2q95-fh2g
Remediation
- Fix · GHSA-jr6x-2q95-fh2g openclaw (npm) Fixed in 2026.3.1 Advisory →
Timeline
- 2026-10-03 Threatist record created from GHSA-jr6x-2q95-fh2g
References
Sources
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences