What is the CVSS score of CVE-2026-32039?

CVE-2026-32039 has a CVSS 3.1 base score of 5.9 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:N. EPSS exploitation probability: 0.0%.

Which versions of Openclaw are affected by CVE-2026-32039?

CVE-2026-32039 presents moderate security risk, a IDOR vulnerability rated CVSS 5.9. Exploitation could compromise the security of affected deployments.. A patch is available.

How to fix or mitigate CVE-2026-32039?

Within 30 days: Identify affected systems running an authorization bypass vulnerability in the toolsBySender g and apply vendor patches as part of regular patch cycle. Monitor vendor channels for patch availability.

Openclaw CVE-2026-32039

MEDIUM

Authorization Bypass Through User-Controlled Key (CWE-639)

2026-03-19 disclosure@vulncheck.com

GHSA-wpph-cjgr-7c39

Authentication Bypass Openclaw

5.9

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

5.9 MEDIUM

AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:N

Attack Vector

Network

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

High

Availability

None

Lifecycle Timeline

Patch released

Mar 31, 2026 - 21:13 nvd

Patch available

Analysis Generated

Mar 19, 2026 - 22:30 vuln.today

CVE Published

Mar 19, 2026 - 22:16 nvd

MEDIUM 5.9

DescriptionCVE.org

OpenClaw versions prior to 2026.2.22 contain an authorization bypass vulnerability in the toolsBySender group policy matching that allows attackers to inherit elevated tool permissions through identifier collision attacks. Attackers can exploit untyped sender keys by forcing collisions with mutable identity values such as senderName or senderUsername to bypass sender-authorization policies and gain unauthorized access to privileged tools.

AnalysisAI

OpenClaw versions before 2026.2.22 allow authenticated attackers to bypass sender authorization checks through identifier collision attacks, enabling them to gain unauthorized access to privileged tools. By exploiting untyped sender keys and forcing collisions with mutable identity fields like senderName or senderUsername, attackers can inherit elevated permissions not granted to their account. No patch is currently available for this medium-severity vulnerability.

Technical ContextAI

The vulnerability exists in OpenClaw's toolsBySender group policy matching logic, which uses untyped sender identifiers to authorize access to sensitive tools. The root cause falls under CWE-639 (Authorization Bypass Through User-Controlled Key), a class of flaws where security decisions are made based on user-controllable identifiers without proper type checking or validation. The affected component fails to distinguish between immutable sender identity attributes and mutable ones like senderName or senderUsername, allowing attackers to craft collisions where their user-controlled identity values match those of privileged accounts or groups. This permits inheritance of elevated tool permissions that should be restricted by the sender-authorization policy framework. The vulnerability affects OpenClaw's core authorization layer and impacts the integrity of tool access controls across the application.

RemediationAI

Upgrade OpenClaw to version 2026.2.22 or later immediately, as the patch addresses the untyped sender key validation issue and implements proper identity collision prevention in the toolsBySender group policy matching logic. See the vendor security advisory at https://github.com/openclaw/openclaw/security/advisories/GHSA-wpph-cjgr-7c39 and the patch details at https://github.com/openclaw/openclaw/commit/5547a2275cb69413af3b62c795b93214fe913b57 for deployment guidance. As a temporary mitigation for environments unable to patch immediately, restrict OpenClaw access to trusted users only by implementing strong network-level access controls, disable or restrict the toolsBySender policy matching feature if operationally feasible, and monitor tool access logs for suspicious sender identity collisions or privilege elevation attempts. Validate that all user identities (senderName, senderUsername, etc.) are properly type-validated and immutable before and after patching to prevent regression of this authorization bypass class.