EUVD-2026-21452
GHSA-xp9r-prpg-373r
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessAuthenticate with operator.write access
-
DeliveryInvoke POST /reset-profile via browser.request
-
ExploitBypass profile mutation restrictions
-
ExecutionStop browser and close connections
-
ImpactMove profile directories to Trash
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A01:2025 - Broken Access Control
ASVS 5.0
V8 - Authorization Authorization logic validation
MITRE ATT&CK
1 technique across 1 tactic: Privilege Escalation The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | Requires authenticated access to OpenClaw before version 2026.3.24 with operator.write permission to the browser.request surface. Attacker must be an authenticated caller with specific operator.write privileges to exploit the POST /reset-profile endpoint authorization bypass. |
| Impact | CVSS 8.1 reflects high integrity and availability impact from authenticated privilege escalation. Attacker with operator.write scope can destroy browser state and profiles via POST /reset-profile, crossing privilege boundaries. Network-accessible endpoint with low complexity exploitation makes this critical for environments where OpenClaw handles sensitive automation. Patch availability reduces urgency but affected deployments remain vulnerable. |
| Exploit ScenarioDerived | Authenticated user with operator.write:browser.request scope sends POST /reset-profile request via network. Endpoint lacks proper authorization checks, allowing callers to terminate browser processes, close Playwright connections, and delete profile directories despite lacking intended permissions. No public exploit identified at time of analysis. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Apr 10, 2026
Incorrect authorization in OpenClaw pre-2026.3.24 allows authenticated users with operator.write access to browser.request capability to invoke POST /reset-profile endpoint, bypassing privilege restrictions to terminate running browsers, sever Playwright connections, and relocate profile directories to system Trash. Exploitation requires low-privilege authentication (CVSS PR:L) but achieves high integrity and availability impact through unauthorized state mutation and service disruption across intended security boundaries. No public exploit identified at time of analysis.
RemediationAI
Vendor-released patch: upgrade to OpenClaw 2026.3.24 or later, which implements corrected authorization checks for POST /reset-profile endpoint. Apply commits e7d11f6c33e223a0dd8a21cfe01076bd76cef87a and 4dcc39c25c6cc63fedfd004f52d173716576fcf0 if building from source. Organizations unable to upgrade immediately should restrict operator.write grants to browser.request capability to trusted principals only and audit existing privilege assignments for excessive scope. Disable browser.request API surface entirely if profile mutation features are unused. Review official security advisory at https://github.com/openclaw/openclaw/security/advisories/GHSA-xp9r-prpg-373r for vendor-specific deployment guidance and additional hardening recommendations.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in npm
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
CWE-863 incorrect authorization flaw in endpoint access control logic. Privilege escalation occurs when operator.write scoped to browser.request surface fails to validate caller authorization for profile mutation operations, permitting lateral movement from browser interaction privileges to system-level profile management functions. Root cause: insufficient privilege boundary enforcement between browser.request API surface and administrative /reset-profile handler.
Know when Openclaw gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
2DescriptionCVE.org
OpenClaw before 2026.3.24 contains an incorrect authorization vulnerability in the POST /reset-profile endpoint that allows authenticated callers with operator.write access to browser.request to bypass profile mutation restrictions. Attackers can invoke POST /reset-profile through the browser.request surface to stop the running browser, close Playwright connections, and move profile directories to Trash, crossing intended privilege boundaries.
Blast Radius
ecosystem impact- 3 npm packages depend on openclaw (3 direct, 0 indirect)
Ecosystem-wide dependent count for version 2026.3.24.
Executive ViewAI
OpenClaw versions prior to 2026.3.24 contain an authorization flaw that allows authenticated operators to terminate browser instances and disrupt Playwright automation services they should not control, directly impacting availability and data integrity of browser automation infrastructure. Organizations running OpenClaw should prioritize patching to prevent privilege escalation attacks by internal or compromised operator accounts.
Apply vendor patch to version 2026.3.24 or later. If immediate patching is not possible, restrict operator.write role assignment to only trusted administrators, implement network-level access controls to /reset-profile endpoint, and enable detailed audit logging of POST requests to that endpoint.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Authentication bypass attacks exploit flaws in the verification mechanisms that control access to systems and applications.
Related Vulnerabilities in OpenClaw Multiple Authorization and Privilege Escalation
View all 29Auth bypass in OpenClaw voice-call extension before 2026.2.1. EPSS 0.68%. PoC and patch available.
Privilege escalation in OpenClaw (pre-2026.3.28) allows unauthenticated remote attackers to gain administrative access b
OpenClaw versions 2026.2.22 through 2026.2.24 contain a privilege escalation vulnerability that allows authenticated att
An authorization mismatch vulnerability in OpenClaw versions prior to 2026.3.1 allows authenticated users with operator.
OpenClaw versions prior to 2026.1.29 automatically establish WebSocket connections to attacker-controlled gateway URLs e
Path traversal in OpenClaw through version 2026.3.23 enables unauthenticated remote attackers to read arbitrary files in
Authentication bypass in OpenClaw before 2026.5.3 allows remote attackers with low privileges to receive agent responses
Directory-context bypass in OpenClaw before 2026.8.1 allows authenticated attackers with user interaction to reuse an 'a
Unauthenticated access to the noVNC observer interface in OpenClaw's Docker sandbox browser allows anyone who can reach
OpenClaw versions before 2026.2.26 allow authenticated attackers to write arbitrary files outside the workspace director
OpenClaw versions prior to 2026.2.22 contain a shell environment variable injection vulnerability in the system.run func
OpenClaw versions prior to 2026.2.22 contain a resource exhaustion vulnerability where the application fails to consiste
Exploit-DB