OpenClaw Authorization Mismatch Vulnerability Allowing Privilege Escalation in Agent Runs

A vulnerability in OpenClaw versions prior to 2026.3.1 allows an authorization mismatch that enables authenticated users with operator.write scope to access owner-only tool surfaces, such as gateway and cron, through agent runs in scoped-token deployments. This vulnerability arises from inconsistent owner-only gating during agent execution, allowing write-scoped users to perform control-plane actions beyond their authorized level.

Impact

Exploitation of this vulnerability could lead to unauthorized control-plane actions by write-scoped users, bypassing intended authorization limits.

Remediation

Users can upgrade to OpenClaw version 2026.3.1 or later to address this vulnerability.