Which versions of Openclaw are affected by EUVD-2026-21452?

OpenClaw versions prior to 2026.3.24 contain an authorization flaw that allows authenticated operators to terminate browser instances and disrupt Playwright automation services they should not…. A patch is available.

How to fix or mitigate EUVD-2026-21452?

Within 24 hours: inventory all OpenClaw deployments and identify current versions. Within 7 days: upgrade all OpenClaw instances to version 2026.3.24 or later, and audit operator.write role assignments to remove unnecessary access. Within 30 days: review access logs for /reset-profile endpoint invocations and validate browser automation job execution integrity post-upgrade.

Openclaw EUVD-2026-21452

Q: What is the CVSS score of EUVD-2026-21452?

EUVD-2026-21452 has a CVSS 4.0 base score of 7.2 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

| CVE-2026-35653 HIGH

Incorrect Authorization (CWE-863)

2026-04-10 VulnCheck

GHSA-xp9r-prpg-373r

Authentication Bypass Openclaw

7.2

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

7.2 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

EUVD ID Assigned

Apr 10, 2026 - 16:30 euvd

EUVD-2026-21452

Analysis Generated

Apr 10, 2026 - 16:30 vuln.today

Patch released

Apr 10, 2026 - 16:30 nvd

Patch available

CVE Published

Apr 10, 2026 - 16:03 nvd

HIGH 7.2

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

3 npm packages depend on openclaw (3 direct, 0 indirect)

Ecosystem-wide dependent count for version 2026.3.24.

DescriptionCVE.org

OpenClaw before 2026.3.24 contains an incorrect authorization vulnerability in the POST /reset-profile endpoint that allows authenticated callers with operator.write access to browser.request to bypass profile mutation restrictions. Attackers can invoke POST /reset-profile through the browser.request surface to stop the running browser, close Playwright connections, and move profile directories to Trash, crossing intended privilege boundaries.

AnalysisAI

Incorrect authorization in OpenClaw pre-2026.3.24 allows authenticated users with operator.write access to browser.request capability to invoke POST /reset-profile endpoint, bypassing privilege restrictions to terminate running browsers, sever Playwright connections, and relocate profile directories to system Trash. Exploitation requires low-privilege authentication (CVSS PR:L) but achieves high integrity and availability impact through unauthorized state mutation and service disruption across intended security boundaries. No public exploit identified at time of analysis.

Technical ContextAI

CWE-863 incorrect authorization flaw in endpoint access control logic. Privilege escalation occurs when operator.write scoped to browser.request surface fails to validate caller authorization for profile mutation operations, permitting lateral movement from browser interaction privileges to system-level profile management functions. Root cause: insufficient privilege boundary enforcement between browser.request API surface and administrative /reset-profile handler.

RemediationAI

Vendor-released patch: upgrade to OpenClaw 2026.3.24 or later, which implements corrected authorization checks for POST /reset-profile endpoint. Apply commits e7d11f6c33e223a0dd8a21cfe01076bd76cef87a and 4dcc39c25c6cc63fedfd004f52d173716576fcf0 if building from source. Organizations unable to upgrade immediately should restrict operator.write grants to browser.request capability to trusted principals only and audit existing privilege assignments for excessive scope. Disable browser.request API surface entirely if profile mutation features are unused. Review official security advisory at https://github.com/openclaw/openclaw/security/advisories/GHSA-xp9r-prpg-373r for vendor-specific deployment guidance and additional hardening recommendations.