Which versions of OpenClaw are affected by EUVD-2026-36321?

OpenClaw versions before 2026.5.19 contain an authorization flaw allowing authenticated lower-privilege users to access confidential messages from channels outside their assigned permissions.. A patch is available.

How to fix or mitigate EUVD-2026-36321?

Within 24 hours: Identify and document all OpenClaw deployments and current versions in use. Within 7 days: Upgrade all affected instances to OpenClaw version 2026.5.19 or later. Within 30 days: Audit message access logs for evidence of unauthorized channel access attempts and notify affected users of potential information exposure.

OpenClaw EUVD-2026-36321

Q: What is the CVSS score of EUVD-2026-36321?

EUVD-2026-36321 has a CVSS 4.0 base score of 7.1 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

| CVE-2026-53815 HIGH

Missing Authorization (CWE-862)

2026-06-11 VulnCheck

GHSA-q7q8-3mgw-q67r

Authentication Bypass Openclaw

7.1

CVSS 4.0 · Vendor: VulnCheck

Severity by source

Vendor (VulnCheck) PRIMARY

7.1 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

6.5 MEDIUM

Network-reachable API, low complexity, requires any authenticated low-privilege account (PR:L), no user interaction, and impact is confidentiality-only on channel messages.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (VulnCheck).

CVSS VectorVendor: VulnCheck

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Jun 11, 2026 - 21:23 vuln.today

DescriptionCVE.org

OpenClaw before 2026.5.19 contains an authorization bypass vulnerability in message read actions that skips channel allowlist checks. Lower-trust callers can request messages from channels not intended for them by exploiting insufficient validation in the affected feature, potentially exposing sensitive channel messages.

AnalysisAI

Authorization bypass in OpenClaw before 2026.5.19 allows authenticated lower-trust users to read messages from channels outside their allowlist by abusing missing validation in message read actions. The flaw maps to CWE-862 (Missing Authorization) and carries a CVSS 4.0 score of 7.1 with high confidentiality impact; no public exploit identified at time of analysis, but a vendor patch is available.

Technical ContextAI

OpenClaw is the affected application (CPE cpe:2.3:a:openclaw:openclaw:*) and the vulnerability resides in its message read action handler, which is supposed to enforce a per-channel allowlist before returning channel messages. CWE-862 (Missing Authorization) describes exactly this root cause: the code path performs the requested data retrieval without first verifying that the caller's role or channel membership entitles them to access that channel. Because the check is skipped server-side, the trust boundary collapses to whatever the client chooses to request, turning a channel identifier into an effectively unauthenticated reference inside an authenticated session.

RemediationAI

Vendor-released patch: upgrade OpenClaw to version 2026.5.19 or later as described in GHSA-q7q8-3mgw-q67r (https://github.com/openclaw/openclaw/security/advisories/GHSA-q7q8-3mgw-q67r); this is the primary and recommended fix. If immediate upgrade is not possible, restrict access to the message read endpoint at a reverse proxy or API gateway so that only trusted user roles can reach it, and audit recent message-read requests for channel IDs that fall outside each caller's allowlist - with the trade-off that proxy-level filtering cannot enforce per-user channel membership and may block legitimate traffic. Reviewing the VulnCheck advisory at https://www.vulncheck.com/advisories/openclaw-channel-allowlist-bypass-in-message-read-actions can help identify request patterns to alert on until patching completes.