Description
OpenClaw before 2026.3.24 contains missing authorization vulnerabilities in the /send and /allowlist chat command handlers. The /send command allows non-owner command-authorized senders to change owner-only session delivery policy settings, and the /allowlist mutating commands fail to enforce operator.admin scope. Attackers with operator.write scope can invoke /send on|off|inherit to persistently mutate the current session's sendPolicy, and execute /allowlist add commands to modify config-backed allowFrom entries and pairing-store allowlist entries without proper admin authorization.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
OpenClaw OpenClaw
Default version status: unaffected
0 to < 2026.3.24affected2026.3.24unaffected
pkg:npm/openclawReferences
- https://github.com/openclaw/openclaw/security/advisories/GHSA-39mp-545q-w789 ↗
- https://github.com/openclaw/openclaw/security/advisories/GHSA-vqvg-86cc-cg83 ↗
- https://github.com/openclaw/openclaw/commit/ccfeecb6887cd97937e33a71877ad512741e82b2 ↗
- https://github.com/openclaw/openclaw/commit/ea018a68ccb92dbc735bc1df9880d5c95c63ca35 ↗
- https://github.com/openclaw/openclaw/commit/555b2578a8cc6e1b93f717496935ead97bfbed8b ↗
- https://www.vulncheck.com/advisories/openclaw-missing-authorization-in-send-and-allowlist-chat-commands ↗