Openclaw cli: OpenClaw: Plugin subagent routes could bypass gateway authorization with synthetic admin scopes (CVE-2026-32916)

In openclaw CLI versions >=2026.3.7 and <2026.3.11, the plugin subagent runtime dispatches gateway methods through a synthetic operator client that carries broad administrative scopes. Plugin-owned HTTP routes using 'auth: "plugin"' bypass normal gateway authorization, enabling external unauthenticated requests to invoke admin-only gateway actions. The vulnerability arises because the subagent runtime does not preserve the original caller's authorization context or least-privilege scope, instead using a fabricated admin-scoped client. The fix in version 2026.3.11 ensures real authorization boundaries are preserved for plugin subagent calls.

This vulnerability allows an unauthenticated external attacker to bypass gateway authorization and perform critical administrative actions such as deleting sessions, reading session data, or triggering agent execution. The impact includes full compromise of gateway administrative functions, leading to potential data exposure and disruption of service.

Upgrade openclaw CLI to version 2026.3.11 or later, where the vulnerability is fixed by preserving real authorization boundaries for plugin subagent calls. No other workarounds are recommended.