In short
- CVE-2026-32898 is a MEDIUM (CVSS 5.4) vulnerability affecting openclaw (openclaw), openclaw.
- Chance of exploitation in the next 30 days (EPSS): 0.26%, higher than 18.1% of all vulnerabilities.
- Fix: update to 2026.2.23 or later.
| Package | Affected versions | Patched versions |
|---|
| openclaw | < 2026.2.23
| 2026.2.23
|
| openclaw npm | < 2026.2.23
| 2026.2.23
|
Description
Vulnerability Summary
The OpenClaw ACP client could auto-approve tool calls based on untrusted metadata and permissive name heuristics. A malicious or compromised ACP tool invocation could bypass expected interactive approval prompts for read-class operations.
Affected Packages / Versions
- Package: npm
openclaw
- Affected published versions:
<= 2026.2.22-2 (latest published as of February 24, 2026 is 2026.2.22-2)
- Patched in code on
main: 2026.2.23 (released)
Technical Details
- Permission classification trusted incoming
toolCall.kind and heuristic name matching.
- Non-core read-like names and spoofed kind metadata could reach auto-approve paths.
read operations were not scoped strongly enough to cwd in all metadata/title forms.
Fix
- Require trusted core tool IDs for auto-approval and ignore untrusted
toolCall.kind as an authorization source.
- Scope
read auto-approval to cwd-resolved paths.
- Add stricter tool-name validation and regression coverage for spoofed kind and non-core read-like names.
Affected Functions
resolvePermissionRequestresolveToolNameForPermissionshouldAutoApproveToolCall
Fix Commit(s)
12cc754332f9a7c92e158ce7644aa22df79c090463dcd28ae0be2de1c75af09cc81841cebeec068f
Found using MCPwner
Thanks @nedlir for reporting.
NVD description
OpenClaw versions prior to 2026.2.23 contain an authorization bypass vulnerability in the ACP client that auto-approves tool calls based on untrusted toolCall.kind metadata and permissive name heuristics. Attackers can bypass interactive approval prompts for read-class operations by spoofing tool metadata or using non-core read-like names to reach auto-approve paths.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free