What is the CVSS score of CVE-2026-32899?

CVE-2026-32899 has a CVSS 3.1 base score of 4.3 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N. EPSS exploitation probability: 0.0%.

Which versions of Openclaw are affected by CVE-2026-32899?

CVE-2026-32899 presents moderate security risk, a incorrect authorization vulnerability rated CVSS 4.3. Attackers could gain access beyond their authorized level.. A patch is available.

Is there a public PoC exploit available for CVE-2026-32899?

Yes, a public proof-of-concept exploit is available for CVE-2026-32899. Prioritise patching immediately. EPSS: 0.0%.

How to fix or mitigate CVE-2026-32899?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Vendor patch is available.

Openclaw CVE-2026-32899

EUVD-2026-13978 MEDIUM

Incorrect Authorization (CWE-863)

2026-03-21 VulnCheck

Authentication Bypass Openclaw

4.3

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

4.3 MEDIUM

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

Low

Availability

None

Lifecycle Timeline

PoC Detected

Mar 24, 2026 - 21:06 vuln.today

Public exploit code

EUVD ID Assigned

Mar 21, 2026 - 01:00 euvd

EUVD-2026-13978

Analysis Generated

Mar 21, 2026 - 01:00 vuln.today

Patch released

Mar 21, 2026 - 01:00 nvd

Patch available

CVE Published

Mar 21, 2026 - 00:42 nvd

MEDIUM 4.3

DescriptionCVE.org

OpenClaw versions prior to 2026.2.25 fail to consistently apply sender-policy checks to reaction_* and pin_* non-message events before adding them to system-event context. Attackers can bypass configured DM policies and channel user allowlists to inject unauthorized reaction and pin events from restricted senders.

AnalysisAI

OpenClaw fails to consistently apply sender-policy checks to reaction and pin event handlers, allowing authenticated attackers to bypass configured direct message policies and channel user allowlists by injecting unauthorized events from restricted senders. The vulnerability affects OpenClaw versions prior to 2026.2.25, requires low privileges (authenticated user), and enables unauthorized event injection with moderate severity (CVSS 4.3). A patch is available from the vendor, and the vulnerability has been documented in the VulnCheck advisory and GitHub Security Advisory GHSA-rm2p-j3r7-4x4j.

Technical ContextAI

The vulnerability exists in OpenClaw's event handling system (cpe:2.3:a:openclaw:openclaw), a chat platform similar to Slack that manages collaborative communication through various event types. The root cause is classified under CWE-863 (Incorrect Authorization), where sender-policy validation mechanisms designed to enforce DM policies and channel user allowlists are not consistently applied to non-message events specifically reaction_* and pin_* event types. These events are processed and added to the system-event context without proper authorization checks, creating a gap where the authentication model exists but authorization enforcement is inconsistent across different event categories. The underlying issue is a failure to validate event source permissions before context mutation.

RemediationAI

Upgrade OpenClaw to version 2026.2.25 or later to apply the sender-policy validation fixes implemented in commits aedf62ac7e669a89c7b295201bf6537dc6b12e0e and 75dfb71e4e8b7c2feba5a8ca662f92ea840e0147. Organizations unable to immediately patch should review and restrict who can perform reaction and pin operations in sensitive channels, enforce channel membership controls, and audit recent reaction and pin events for unauthorized sources. For detailed patching instructions and validation steps, consult the vendor advisory at https://github.com/openclaw/openclaw/security/advisories/GHSA-rm2p-j3r7-4x4j.