Which versions of Openclaw are affected by CVE-2026-32972?

OpenClaw versions before 2026.3.11 contain a privilege escalation vulnerability that allows authenticated operators with basic write permissions to assume administrative browser profile management…. A patch is available.

How to fix or mitigate CVE-2026-32972?

Within 24 hours: Identify all OpenClaw instances in production and confirm current version numbers. Within 7 days: Apply vendor patch to upgrade all instances to OpenClaw 2026.3.11 or later; if immediate patching is impossible, restrict operator.write permissions to only essential personnel and disable remote Chrome DevTools Protocol access at the network boundary. Within 30 days: Conduct access reviews of all operator accounts, audit operator.write privilege assignments, and implement network segmentation to limit CDP endpoint communication.

Openclaw CVE-2026-32972

Q: What is the CVSS score of CVE-2026-32972?

CVE-2026-32972 has a CVSS 4.0 base score of 7.1 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-17009 HIGH

Incorrect Authorization (CWE-863)

2026-03-29 VulnCheck

Authentication Bypass Openclaw

7.1

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

7.1 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Analysis Updated

Apr 16, 2026 - 06:11 EUVD-patch-fix

executive_summary

Re-analysis Queued

Apr 16, 2026 - 05:29 backfill_euvd_patch

patch_released

Patch available

Apr 16, 2026 - 05:29 EUVD

2026.3.11

EUVD ID Assigned

Mar 29, 2026 - 13:15 euvd

EUVD-2026-17009

Analysis Generated

Mar 29, 2026 - 13:15 vuln.today

CVE Published

Mar 29, 2026 - 12:44 nvd

HIGH 7.1

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

3 npm packages depend on openclaw (3 direct, 0 indirect)

Ecosystem-wide dependent count for version 2026.3.11.

DescriptionCVE.org

OpenClaw before 2026.3.11 contains an authorization bypass vulnerability allowing authenticated operators with only operator.write permission to access admin-only browser profile management routes through browser.request. Attackers can create or modify browser profiles and persist attacker-controlled remote CDP endpoints to disk without holding operator.admin privileges.

AnalysisAI

Privilege escalation in OpenClaw versions prior to 2026.3.11 allows authenticated users with operator.write permissions to execute administrative browser profile management functions, bypassing role-based access controls. Attackers can persist malicious remote Chrome DevTools Protocol (CDP) endpoints to disk, enabling potential remote code execution or session hijacking without operator.admin privileges. EPSS data not available; no public exploit identified at time of analysis. CVSS 7.1 (High) reflects network-accessible attack requiring only low-privileged authentication.

Technical ContextAI

This authorization bypass (CWE-863) stems from improper permission validation in OpenClaw's browser automation framework. The application implements role-based access control with distinct operator.write and operator.admin privilege levels, but fails to enforce authorization checks on administrative routes accessible through the browser.request API surface. Browser profile management includes configuration of remote CDP endpoints-WebSocket URLs used by browser automation tools to control Chromium-based browsers. By persisting attacker-controlled CDP endpoints to OpenClaw's configuration storage, lower-privileged operators can redirect browser sessions to malicious debugging servers, potentially enabling command injection, session interception, or lateral movement within automated testing/scraping infrastructure. The affected component (cpe:2.3:a:openclaw:openclaw) is a browser automation platform where profile management should be restricted to administrative roles.

RemediationAI

Upgrade to OpenClaw version 2026.3.11 or later, which contains authorization enforcement fixes for browser profile management routes per vendor advisory GHSA-vmhq-cqm9-6p7q. Organizations unable to immediately upgrade should implement compensating controls including strict audit logging of all browser.request API calls, network segmentation to isolate OpenClaw instances from sensitive browser automation targets, and review of existing browser profiles for unauthorized CDP endpoint configurations. Examine application logs for suspicious profile creation or modification activity by accounts holding only operator.write permissions during the window of vulnerability. Revoke and rotate credentials for operator-level accounts if unauthorized profile changes are detected. The vendor security advisory at https://github.com/openclaw/openclaw/security/advisories/GHSA-vmhq-cqm9-6p7q and VulnCheck analysis at https://www.vulncheck.com/advisories/openclaw-authorization-bypass-in-browser-profile-management-via-browser-request provide additional remediation guidance.