← Database

CVE-2026-32976

MEDIUM CVSS: 6.5 Published: 2026-03-31 Modified: 2026-07-25

Description

OpenClaw before 2026.3.11 contains an authorization bypass vulnerability allowing channel commands to mutate protected sibling-account configuration despite configWrites restrictions. Attackers with authorized access on one account can execute channel commands like /config set channels..accounts. to modify configuration on target accounts with configWrites: false.

Affected Platforms

Openclaw Openclaw

Weakness Type

CWE-639

References