OpenClaw Authorization Bypass Vulnerability in Chat Gateway Provenance Fields

An authorization bypass vulnerability has been identified in OpenClaw versions prior to 2026.3.28. The issue resides in the chat.send gateway method, where ACP-only provenance fields are controlled by self-declared client metadata from the WebSocket handshake, rather than verified authorization status. This flaw allows authenticated operator clients to spoof ACP identity labels and inject reserved provenance fields meant solely for the ACP bridge by manipulating client metadata during the connection process.

Impact

Exploitation of this vulnerability allows authenticated operator clients to spoof ACP identity labels and inject reserved provenance fields into the chat.send gateway, bypassing the intended authorization controls.

Remediation

Users can upgrade to OpenClaw version 2026.3.28 or later to address this vulnerability.