What is the CVSS score of CVE-2026-32005?

CVE-2026-32005 has a CVSS 3.1 base score of 6.8 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N. EPSS exploitation probability: 0.0%.

Which versions of Openclaw are affected by CVE-2026-32005?

CVE-2026-32005 presents notable security risk, a incorrect authorization vulnerability rated CVSS 6.8. Attackers could gain access beyond their authorized level.. A patch is available.

How to fix or mitigate CVE-2026-32005?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Monitor vendor channels for patch availability.

Openclaw CVE-2026-32005

MEDIUM

Incorrect Authorization (CWE-863)

2026-03-19 disclosure@vulncheck.com

GHSA-x2ff-j5c2-ggpr

Authentication Bypass Openclaw

6.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

6.8 MEDIUM

AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

Attack Vector

Network

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

None

Lifecycle Timeline

Patch released

Mar 31, 2026 - 21:13 nvd

Patch available

Analysis Generated

Mar 19, 2026 - 22:30 vuln.today

CVE Published

Mar 19, 2026 - 22:16 nvd

MEDIUM 6.8

DescriptionCVE.org

OpenClaw versions prior to 2026.2.25 fail to enforce sender authorization checks for interactive callbacks including block_action, view_submission, and view_closed in shared workspace deployments. Unauthorized workspace members can bypass allowFrom restrictions and channel user allowlists to enqueue system-event text into active sessions.

AnalysisAI

OpenClaw versions prior to 2026.2.25 contain an authorization bypass vulnerability in interactive callback handlers (block_action, view_submission, view_closed) that allows authenticated but unauthorized workspace members to bypass sender authorization checks and enqueue arbitrary system events into active sessions. This affects shared workspace deployments where multiple users with varying permission levels coexist, enabling privilege escalation and information disclosure attacks without requiring elevated privileges or user interaction.

Technical ContextAI

OpenClaw's interactive callback system processes workspace events through handlers that should enforce per-sender authorization via allowFrom restrictions and channel user allowlists. The vulnerability stems from CWE-863 (Incorrect Authorization), a root cause where the application fails to verify that callback senders are actually authorized before processing their requests. The affected callback types (block_action, view_submission, view_closed) are standard Slack-compatible interactive message handlers, indicating OpenClaw implements a Slack-like integration framework. The vulnerability allows attackers to inject system-event text into active user sessions by circumventing the authorization check logic entirely, effectively treating all workspace members as if they were authorized senders regardless of their actual role or channel membership restrictions.

RemediationAI

Immediately upgrade OpenClaw to version 2026.2.25 or later, which includes the authorization check enforcement fix. The patch re-enables sender validation for interactive callbacks, preventing unauthorized workspace members from triggering system events. Until patching is completed, administrators should restrict workspace membership to trusted users only and implement network-level access controls to limit who can connect to the OpenClaw instance. Additionally, review audit logs for any suspicious interactive callback activity or system events enqueued by lower-privileged users, and consider temporarily disabling interactive callback features if the deployment cannot be patched promptly. For detailed patching instructions and verification, consult the security advisory at https://github.com/openclaw/openclaw/security/advisories/GHSA-x2ff-j5c2-ggpr.