Openclaw cli: OpenClaw's mutating internal ACP chat commands missed operator.admin scope enforcement (CVE-2026-35631)
Description
OpenClaw CLI versions prior to 2026.3.22 have a vulnerability where mutating internal ACP chat commands do not enforce the operator.admin scope. This allows users with lower privileges to perform mutating control-plane actions that should be restricted. The issue was fixed in version 2026.3.22 and later.
CVSS v4.0
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability in OpenClaw CLI involves internal ACP chat commands that mutate state but missed enforcing the operator.admin permission gate. This missing enforcement allowed users with lower privileges to execute mutating control-plane actions that should have been restricted to administrators. The fix introduced a requirement for operator.admin scope on these mutating commands, with regression tests added to verify correct permission enforcement. The affected versions are all releases before 2026.3.22, with the fix present from 2026.3.22 onwards.
Potential Impact
Users without operator.admin privileges could perform unauthorized mutating actions on the control plane via internal ACP chat commands. This could lead to unauthorized changes in the system's state or configuration. There is no indication of known exploits in the wild.
Mitigation Recommendations
Upgrade OpenClaw CLI to version 2026.3.22 or later, where the operator.admin scope enforcement for mutating internal ACP chat commands is properly implemented. No additional mitigation steps are indicated.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- BREW-openclaw-cli-CVE-2026-35631
- Osv Schema Version
- 1.7.3
- Ecosystems
- ["Homebrew"]
- Cvss Version
- 4.0
Threat ID: 6ac245d812601ec6a31680a0
Added to database: 10/04/2026, 12:26:00 UTC
Last enriched: 10/04/2026, 13:20:09 UTC
Last updated: 10/04/2026, 16:08:37 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.