EUVD-2026-21466
GHSA-wq58-2pvg-5h4f
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessAuthenticate as operator.write user
-
ExploitCall /reset endpoint with sessionKey parameter
-
ExecutionBypass admin session requirements
-
ImpactReset arbitrary admin sessions
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A01:2025 - Broken Access Control
ASVS 5.0
V8 - Authorization Authorization checks on every request
MITRE ATT&CK
1 technique across 1 tactic: Privilege Escalation The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | Attacker must have operator.write permission in OpenClaw before 2026.3.23. Exploit involves sending crafted /reset or /new messages to the Gateway agent endpoint with an explicit sessionKey parameter to reset arbitrary admin sessions, bypassing operator.admin role requirement. |
| Impact | High-severity privilege escalation affecting authenticated operators. CVSS 8.1 reflects network-accessible endpoint exploitable by authenticated users with operator.write role to reset admin sessions, causing integrity and availability impact. Patch availability and operator.write requirement limit blast radius to internal deployments with multi-privileged accounts. Prioritize patching if operator.write is widely distributed. |
| Exploit ScenarioDerived | Authenticated operator with operator.write permission sends POST to /reset endpoint with explicit sessionKey parameter targeting admin session. Gateway agent fails to validate operator.admin requirement, resetting arbitrary session and disrupting admin access. No public exploit code identified at time of analysis. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Apr 10, 2026
Insufficient access control in OpenClaw Gateway agent allows authenticated attackers with operator.write permission to reset admin sessions without operator.admin authorization. By invoking /reset or /new endpoints with explicit sessionKey parameters, attackers bypass privilege requirements and terminate arbitrary administrative sessions, achieving high-impact session hijacking. Affects OpenClaw versions prior to 2026.3.23. No public exploit identified at time of analysis.
RemediationAI
Vendor-released patch: upgrade to OpenClaw version 2026.3.23 or later. Apply upstream commits 630f1479c44f78484dfa21bb407cbe6f171dac87 and 50f6a2f136fed85b58548a38f7a3dbb98d2cd1a0 which enforce proper authorization checks on Gateway agent /reset and /new endpoints. Review and restrict operator.write role assignments to trusted users. Audit session logs for unauthorized /reset invocations prior to patching. Full security advisory: https://github.com/openclaw/openclaw/security/advisories/GHSA-wq58-2pvg-5h4f. Additional technical analysis: https://www.vulncheck.com/advisories/openclaw-insufficient-access-control-in-gateway-agent-session-reset
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in npm
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
CWE-862 missing authorization vulnerability permits privilege escalation through endpoint parameter injection. Gateway agent fails to validate caller privileges against sessionKey ownership, allowing operator.write users to manipulate admin-level session lifecycle operations without operator.admin role enforcement.
Know when Openclaw gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
2DescriptionCVE.org
OpenClaw before 2026.3.23 contains an insufficient access control vulnerability in the Gateway agent /reset endpoint that allows callers with operator.write permission to reset admin sessions. Attackers with operator.write privileges can invoke /reset or /new messages with an explicit sessionKey to bypass operator.admin requirements and reset arbitrary sessions.
Executive ViewAI
CVE-2026-35660 is a privilege escalation vulnerability in OpenClaw Gateway agent that allows authenticated operators to forcibly terminate administrative sessions, potentially disrupting critical infrastructure access and enabling unauthorized administrative control. Organizations running OpenClaw versions before 2026.3.23 face immediate risk of session hijacking by internal threat actors with basic operator permissions, threatening operational continuity and administrative account security.
Apply vendor patch. Until patched: implement network-level restrictions limiting /reset and /new endpoint access to authorized administrative interfaces only; enable detailed logging and alerting on all session reset operations; restrict operator.write role assignments to minimum necessary personnel; monitor for anomalous session termination patterns.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Authentication bypass attacks exploit flaws in the verification mechanisms that control access to systems and applications.
Related Vulnerabilities in OpenClaw Multiple Authorization and Privilege Escalation
View all 29Auth bypass in OpenClaw voice-call extension before 2026.2.1. EPSS 0.68%. PoC and patch available.
Privilege escalation in OpenClaw (pre-2026.3.28) allows unauthenticated remote attackers to gain administrative access b
OpenClaw versions 2026.2.22 through 2026.2.24 contain a privilege escalation vulnerability that allows authenticated att
An authorization mismatch vulnerability in OpenClaw versions prior to 2026.3.1 allows authenticated users with operator.
OpenClaw versions prior to 2026.1.29 automatically establish WebSocket connections to attacker-controlled gateway URLs e
Path traversal in OpenClaw through version 2026.3.23 enables unauthenticated remote attackers to read arbitrary files in
Authentication bypass in OpenClaw before 2026.5.3 allows remote attackers with low privileges to receive agent responses
Directory-context bypass in OpenClaw before 2026.8.1 allows authenticated attackers with user interaction to reuse an 'a
Unauthenticated access to the noVNC observer interface in OpenClaw's Docker sandbox browser allows anyone who can reach
OpenClaw versions before 2026.2.26 allow authenticated attackers to write arbitrary files outside the workspace director
OpenClaw versions prior to 2026.2.22 contain a shell environment variable injection vulnerability in the system.run func
OpenClaw versions prior to 2026.2.22 contain a resource exhaustion vulnerability where the application fails to consiste
Exploit-DB