Openclaw cli: OpenClaw: Mutating internal `/allowlist` chat commands missed `operator.admin` scope enforcement
Description
OpenClaw CLI versions from 2026.1.29 up to but not including 2026.3.24 contain an authorization flaw in the internal `/allowlist` chat commands. These commands allow an authenticated internal Gateway caller with `operator.write` scope to perform mutating actions that should require `operator.admin` scope. This missing authorization check permits persistent changes to configuration and pairing-store allowlist entries without proper admin privileges. The issue was fixed in OpenClaw 2026.3.24.
CVSS v3.1
Score 6.5medium
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
OpenClaw CLI has a missing authorization enforcement in its internal `/allowlist` chat commands, where mutating actions do not require the `operator.admin` scope as intended. Instead, an internal Gateway caller with only `operator.write` scope can perform persistent state changes to config-backed `allowFrom` entries and pairing-store allowlist entries. This flaw was introduced in version 2026.1.20 and affects releases up to 2026.3.23. The vulnerability is confirmed by code analysis and runtime tests, showing that the commands succeed without admin scope, violating the internal scope model. The flaw was fixed in version 2026.3.24.
Potential Impact
An authenticated internal Gateway caller with `operator.write` scope can perform unauthorized persistent modifications to the allowlist configuration and pairing-store entries, bypassing the intended `operator.admin` scope requirement. This leads to unauthorized state changes within OpenClaw's internal control plane, potentially impacting system behavior reliant on allowlist configurations. There is no impact on confidentiality or availability, but integrity is affected due to unauthorized modifications.
Mitigation Recommendations
A fix is available in OpenClaw version 2026.3.24. Users should upgrade to this version or later to ensure proper authorization enforcement on `/allowlist` mutating commands. No additional mitigation is required as the vendor has addressed the issue with an official fix.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- BREW-openclaw-cli-GHSA-vqvg-86cc-cg83
- Osv Schema Version
- 1.7.3
- Ecosystems
- ["Homebrew"]
- Cvss Version
- 3.1
Threat ID: 6ac2458012601ec6a316406d
Added to database: 10/04/2026, 12:24:32 UTC
Last enriched: 10/04/2026, 12:29:38 UTC
Last updated: 10/04/2026, 12:29:38 UTC
Views: 1
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.