OpenClaw Privilege Escalation Vulnerability in Chat Command Allowing Unauthorized Session Resets

A privilege escalation vulnerability has been identified in OpenClaw versions prior to 2026.3.28. The issue resides in the chat.send command, where write-scoped gateway callers can improperly access admin-only session reset operations. This vulnerability allows attackers to rotate sessions, archive previous transcript states, and generate new session IDs without administrative privileges, by exploiting inadequate authorization checks in the chat.send pathway.

Impact

Exploitation of this vulnerability enables write-scoped gateway callers to reset sessions arbitrarily, bypassing admin restrictions. This includes rotating the session, saving the previous chat transcript, and forcing the creation of a new session ID.

Remediation

Users can upgrade to OpenClaw version 2026.3.28 or later to address this vulnerability.