Openclaw cli: OpenClaw: `operator.write` chat.send could reach admin-only config writes

The openclaw CLI had an authorization flaw where a gateway client authenticated with operator.write could use the chat.send interface to execute /config set or /config unset commands, resulting in persistent configuration mutations. Normally, direct config RPC methods require operator.admin scope, but the chat.send command context incorrectly allowed these writes with operator.write scope due to insufficient checks. The fix, released in version 2026.3.7, enforces operator.admin scope for persistent config writes routed through chat.send while preserving read-only config show access for operator.write clients and maintaining normal messaging channel behavior.

The vulnerability allows an authenticated gateway client with operator.write privileges and chat.send access to escalate their control-plane privileges to perform persistent configuration changes that should be restricted to operator.admin users. This could lead to unauthorized configuration mutations, potentially affecting system behavior or security posture. However, exploitation requires specific preconditions, limiting the scope of impact. There is no indication of confidentiality or availability impact, and no known exploits in the wild.

A patch is available and was released in openclaw CLI version 2026.3.7. Users should upgrade to version 2026.3.7 or later to remediate this issue. The fix enforces operator.admin scope for persistent config writes routed through chat.send, restoring intended privilege boundaries. No additional mitigation actions are required beyond applying the official fix.