Openclaw cli: OpenClaw: Untrusted web origins can obtain authenticated operator.admin access in trusted-proxy mode (CVE-2026-32302)

In openclaw CLI versions prior to 2026.3.11, the WebSocket handshake logic incorrectly exempted requests containing proxy headers from browser origin validation when gateway.auth.mode was set to trusted-proxy. This flaw allowed a malicious web page from an untrusted origin to connect through a trusted reverse proxy, inherit the proxy-authenticated operator identity, and establish a privileged operator session. Verified impact includes the ability to call operator.admin methods such as config.get, exposing sensitive configuration data. The vulnerability is fixed in version 2026.3.11 by enforcing browser origin validation on all browser-originated WebSocket connections regardless of proxy headers.

Attackers controlling a malicious web page that can reach the proxy endpoint may establish cross-site WebSocket connections that bypass origin checks and gain operator.admin privileges. This can lead to unauthorized access to sensitive configuration and potentially other privileged reads or mutations available to operator-class sessions. The issue affects deployments exposing the Gateway behind a trusted reverse proxy relying on browser origin restrictions.

A fix is available in openclaw version 2026.3.11 and later. Users should upgrade to this version to resolve the vulnerability. If immediate upgrade is not possible, avoid exposing Gateway WebSocket endpoints in trusted-proxy mode to untrusted origins and restrict reverse-proxy/browser reachability to trusted origins only.