EUVD-2026-21450Vulnerability Assessment
| Weakness |
CWE
ASVS 5.0
V15 - Secure Coding and Architecture Incorrect behavior order
|
| Impact | The CVSS 3.1 score of 6.5 reflects network accessibility (AV:N), low attack complexity (AC:L), and no privilege requirements (PR:N), indicating that any network-connected attacker can exploit this without authentication or user interaction. The impact is limited to integrity and availability (CIA:L), not confidentiality. While the EPSS score is not provided, the attack surface is significant given that OpenClaw likely exposes callback endpoints to network clients. The authorization bypass classification, combined with unauthenticated network access and race-condition mechanics, suggests this is a legitimate priority issue for organizations running OpenClaw. However, the lack of public exploit code and absence of CISA KEV status indicate this is not yet observed in active attacks. Organizations should prioritize patching based on deployment exposure and callback handler sensitivity rather than assumed mass exploitation. |
| Exploit ScenarioDerived | An unauthenticated attacker on the network crafts a specially-timed callback request to an OpenClaw instance, sending it before the allowlist validation completes. The callback handler executes an unauthorized action (e.g., modifying state, triggering a denial-of-service condition) because the authorization bypass allows the handler to run without sender verification. This is feasible because the attack requires only network access and standard HTTP/protocol knowledge, with no need for valid credentials or user interaction. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Apr 10, 2026
OpenClaw before version 2026.3.22 suffers from an authorization bypass in its interactive callback dispatch mechanism that permits unauthenticated remote attackers to execute action handlers without sender allowlist validation. The vulnerability exploits a race condition or timing gap where callbacks are processed before security checks complete, enabling unauthorized state modification and availability impact. No public exploit code or active exploitation has been confirmed at time of analysis, but the low attack complexity and lack of authentication requirements make this a practical threat to exposed OpenClaw deployments.
RemediationAI
Upgrade OpenClaw to version 2026.3.22 or later, which includes fixes applied in commits 630f1479c44f78484dfa21bb407cbe6f171dac87 and a47722de7e3c9cbda8d5512747ca7e3bb8f6ee66 that reorder authorization validation to execute before callback dispatch. Verify the upgrade by checking that sender allowlist validation occurs as the first step in the callback handler chain. No workarounds are documented; patching is the primary remediation. Review the official advisory at https://github.com/openclaw/openclaw/security/advisories/GHSA-8883-9w57-vwv6 and https://www.vulncheck.com/advisories/openclaw-unauthorized-action-execution-via-callback-dispatch for additional context.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in npm
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
OpenClaw's interactive callback dispatch system implements sender authorization through allowlist validation; however, the timing of security checks against callback execution creates a window where non-allowlisted senders can invoke action handlers. This is a classic authorization bypass vulnerability classified as CWE-696 (Incorrect Behavior Order), where the order of operations permits security enforcement to be circumvented. The affected component validates sender identity through allowlist mechanisms, but the race condition in the dispatch flow allows callbacks to execute before these checks complete. All versions of OpenClaw prior to 2026.3.22 are vulnerable; the fix involves reordering the authorization validation to occur before callback execution begins.
Know when Openclaw gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
2DescriptionCVE.org
OpenClaw before 2026.3.22 contains an authorization bypass vulnerability in interactive callback dispatch that allows non-allowlisted senders to execute action handlers. Attackers can bypass sender authorization checks by dispatching callbacks before normal security validation completes, enabling unauthorized actions.
Blast Radius
ecosystem impact- 5 npm packages depend on openclaw (5 direct, 0 indirect)
Ecosystem-wide dependent count for version 2026.3.22.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
GitHub
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Authentication bypass attacks exploit flaws in the verification mechanisms that control access to systems and applications.
Related Vulnerabilities in OpenClaw Multiple Authorization and Privilege Escalation
View all 29Auth bypass in OpenClaw voice-call extension before 2026.2.1. EPSS 0.68%. PoC and patch available.
Privilege escalation in OpenClaw (pre-2026.3.28) allows unauthenticated remote attackers to gain administrative access b
OpenClaw versions 2026.2.22 through 2026.2.24 contain a privilege escalation vulnerability that allows authenticated att
An authorization mismatch vulnerability in OpenClaw versions prior to 2026.3.1 allows authenticated users with operator.
OpenClaw versions prior to 2026.1.29 automatically establish WebSocket connections to attacker-controlled gateway URLs e
Path traversal in OpenClaw through version 2026.3.23 enables unauthenticated remote attackers to read arbitrary files in
Authentication bypass in OpenClaw before 2026.5.3 allows remote attackers with low privileges to receive agent responses
Directory-context bypass in OpenClaw before 2026.8.1 allows authenticated attackers with user interaction to reuse an 'a
Unauthenticated access to the noVNC observer interface in OpenClaw's Docker sandbox browser allows anyone who can reach
OpenClaw versions before 2026.2.26 allow authenticated attackers to write arbitrary files outside the workspace director
OpenClaw versions prior to 2026.2.22 contain a shell environment variable injection vulnerability in the system.run func
OpenClaw versions prior to 2026.2.22 contain a resource exhaustion vulnerability where the application fails to consiste
Exploit-DB