Openclaw cli: OpenClaw: Cross-account sender authorization expansion in `/allowlist ... --store` account scoping

The vulnerability in OpenClaw CLI involves improper scoping of accountId during writes to the allowlist store in the `/allowlist ... --store` command. While reads correctly resolved the accountId, writes dropped it and wrote into a legacy unscoped allowlist store. Since default-account reads merge legacy unscoped entries, this allowed sender authorizations intended for one account to silently authorize the same sender on the default account, causing cross-account authorization expansion. The issue was fixed by scoping writes to the resolved account and clearing legacy default-account entries on removal. The fix was committed on March 7, 2026, and released in version 2026.3.7.

This vulnerability causes improper authorization scoping, allowing an authorized user to expand sender authorization from one channel account to the default account unintentionally. Exploitation requires an existing authorized sender with permission to edit the allowlist, limiting the risk to insiders or compromised accounts with such privileges. The impact is limited to unintended authorization expansion, potentially allowing actions under the default account that were only intended for a specific account.

A patch is available and released in OpenClaw CLI version 2026.3.7. Users should upgrade to version 2026.3.7 or later to remediate this vulnerability. No additional mitigation steps are required beyond applying the official fix.