Which versions of Openclaw are affected by CVE-2026-34512?

OpenClaw versions before 2026.3.25 contain an authorization bypass that allows any authenticated user to terminate critical subagent sessions intended for administrator control only, creating a…. A patch is available.

How to fix or mitigate CVE-2026-34512?

Within 24 hours: Inventory all OpenClaw deployments and document current versions in use. Within 7 days: Upgrade all OpenClaw instances to version 2026.3.25 or later; test in a staging environment first to validate subagent session stability. Within 30 days: Audit session termination logs (review /sessions/:sessionKey/kill endpoint access) for the past 90 days to identify unauthorized session kills; implement role-based access control logging if not already present.

Openclaw CVE-2026-34512

Q: What is the CVSS score of CVE-2026-34512?

CVE-2026-34512 has a CVSS 4.0 base score of 7.2 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-21097 HIGH

Incorrect Authorization (CWE-863)

2026-04-09 VulnCheck

GHSA-h254-pw58-pj8j

Authentication Bypass Openclaw

7.2

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

7.2 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

EUVD ID Assigned

Apr 09, 2026 - 21:45 euvd

EUVD-2026-21097

Analysis Generated

Apr 09, 2026 - 21:45 vuln.today

Patch released

Apr 09, 2026 - 21:45 nvd

Patch available

CVE Published

Apr 09, 2026 - 21:26 nvd

HIGH 7.2

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

3 npm packages depend on openclaw (3 direct, 0 indirect)

Ecosystem-wide dependent count for version 2026.3.24.

DescriptionCVE.org

OpenClaw before 2026.3.25 contains an improper access control vulnerability in the HTTP /sessions/:sessionKey/kill route that allows any bearer-authenticated user to invoke admin-level session termination functions without proper scope validation. Attackers can exploit this by sending authenticated requests to kill arbitrary subagent sessions via the killSubagentRunAdmin function, bypassing ownership and operator scope restrictions.

AnalysisAI

Authorization bypass in OpenClaw versions prior to 2026.3.25 enables authenticated users to terminate arbitrary subagent sessions through the /sessions/:sessionKey/kill HTTP endpoint. Exploiting CWE-863 improper authorization, low-privilege authenticated attackers execute admin-level killSubagentRunAdmin functions without ownership or operator scope validation, achieving high integrity and availability impact on targeted sessions. No public exploit identified at time of analysis.

Technical ContextAI

Root cause: missing authorization scope validation in session termination route handler. CVSS PR:L confirms authentication required but insufficient privilege checks enable horizontal/vertical privilege escalation. CWE-863 indicates authorization enforcement failure allowing bearer-token holders to invoke privileged admin functions regardless of assigned roles or session ownership.

RemediationAI

Upgrade to OpenClaw version 2026.3.25 or later, which implements proper authorization scope validation for session termination endpoints. Vendor-released patch addresses authorization enforcement failure in /sessions/:sessionKey/kill route handler via commit 02cf12371f9353a16455da01cc02e6c4ecfc4152. Organizations unable to immediately upgrade should implement reverse proxy or API gateway authorization controls to restrict /sessions/*/kill endpoint access to verified admin-scoped tokens until patching. Disable or restrict bearer token issuance to untrusted users. Consult vendor security advisory: https://github.com/openclaw/openclaw/security/advisories/GHSA-9p93-7j67-5pc2 and VulnCheck analysis: https://www.vulncheck.com/advisories/openclaw-improper-access-control-in-sessions-sessionkey-kill-endpoint for additional context.