Which versions of Openclaw are affected by CVE-2026-32976?

OpenClaw versions prior to 2026.3.11 contain a privilege escalation vulnerability that allows authenticated users to modify configuration settings across sibling accounts, bypassing intended…. A patch is available.

How to fix or mitigate CVE-2026-32976?

Within 24 hours: Identify all OpenClaw deployments and document current versions in use. Within 7 days: Upgrade all instances to OpenClaw version 2026.3.11 or later; prioritize production environments with multiple linked accounts. Within 30 days: Audit configuration change logs across all accounts for unauthorized modifications dating back 90 days; verify configWrites permissions are properly enforced post-upgrade.

Openclaw CVE-2026-32976

Q: What is the CVSS score of CVE-2026-32976?

CVE-2026-32976 has a CVSS 4.0 base score of 7.1 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-17382 HIGH

Authorization Bypass Through User-Controlled Key (CWE-639)

2026-03-31 VulnCheck

GHSA-mjq6-mg35-5xfx

Authentication Bypass Openclaw

7.1

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

7.1 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Analysis Updated

Apr 16, 2026 - 06:10 EUVD-patch-fix

executive_summary

Re-analysis Queued

Apr 16, 2026 - 05:29 backfill_euvd_patch

patch_released

Patch available

Apr 16, 2026 - 05:29 EUVD

2026.3.11

EUVD ID Assigned

Mar 31, 2026 - 11:45 euvd

EUVD-2026-17382

Analysis Generated

Mar 31, 2026 - 11:45 vuln.today

CVE Published

Mar 31, 2026 - 11:17 nvd

HIGH 7.1

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

3 npm packages depend on openclaw (3 direct, 0 indirect)

Ecosystem-wide dependent count for version 2026.3.11.

DescriptionCVE.org

OpenClaw before 2026.3.11 contains an authorization bypass vulnerability allowing channel commands to mutate protected sibling-account configuration despite configWrites restrictions. Attackers with authorized access on one account can execute channel commands like /config set channels.<provider>.accounts.<id> to modify configuration on target accounts with configWrites: false.

AnalysisAI

OpenClaw before version 2026.3.11 allows authenticated users to bypass authorization restrictions and modify protected configuration on sibling accounts through channel commands, despite configWrites: false restrictions. An attacker with legitimate access to one account can execute /config set commands targeting another account's channel provider configuration, achieving unauthorized modification of settings across account boundaries. This vulnerability is neither actively exploited nor known to have public proof-of-concept code available.

Technical ContextAI

OpenClaw is a configuration management system that enforces access controls via configWrites policies to restrict which accounts can modify specific configuration sections. The vulnerability stems from inadequate authorization checks in the channel command processing logic (CWE-639: Authorization Bypass Through User-Controlled Key). When a user executes channel commands like /config set channels.<provider>.accounts.<id>, the application fails to properly validate whether the requestor has authorization to modify the target account's configuration. The authorization bypass occurs at the command handler level, where sibling-account boundaries are not properly enforced despite the presence of configWrites: false restrictions in the target account's policy. The affected CPE cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:*:*:* encompasses all versions prior to 2026.3.11.

RemediationAI

Vendor-released patch: OpenClaw 2026.3.11 and later. Organizations should upgrade to OpenClaw version 2026.3.11 or newer to apply the authorization bypass fix. No workarounds are documented in the available advisories. The security advisory from GitHub (https://github.com/openclaw/openclaw/security/advisories/GHSA-8jhh-jcqg-mj5p) and the VulnCheck advisory (https://www.vulncheck.com/advisories/openclaw-account-scoped-configwrites-policy-bypass-via-channel-commands) provide additional context and should be consulted for deployment-specific guidance.