Openclaw cli: OpenClaw: Read-scoped identity-bearing HTTP clients could kill sessions via /sessions/:sessionKey/kill (CVE-2026-41298)

Before OpenClaw version 2026.4.2, the POST /sessions/:sessionKey/kill endpoint did not enforce write scopes for identity-bearing HTTP clients. As a result, clients limited to read-only operator scopes could improperly terminate running subagent sessions. This represents an authorization boundary flaw on the HTTP scope enforcement, allowing a read-scoped caller to perform a write-class control-plane mutation. The vulnerability is patched in OpenClaw 2026.4.2 by enforcing session-kill HTTP scopes.

An attacker or user with only read-scoped HTTP identity permissions could terminate active subagent sessions, causing interruption of delegated work. This could lead to denial of service for legitimate session operations. The impact is limited to control-plane session termination and does not affect confidentiality or availability beyond session disruption.

A patch is available in OpenClaw version 2026.4.2 that enforces proper write scope checks on the session kill endpoint. Users should upgrade to version 2026.4.2 or later once it is released. Until then, restrict access to the POST /sessions/:sessionKey/kill endpoint to trusted users only. No other mitigation is indicated by the vendor advisory.