OpenClaw has an unauthorized sender bypass in its stop triggers and /models command authorization

MEDIUMGHSA-8m9v-xpgf-g99m · Published 02/03/2026 · updated 04/03/2026

In short

Package	Affected versions	Patched versions
openclaw npm	`< 2026.3.1`	`2026.3.1`

Unauthorized senders could trigger two command paths without sender authorization checks:

An unauthorized sender could disrupt active sessions and view model/auth metadata that should be authorization-gated.

Sender authorization is now enforced for stop-like abort triggers and /models listings.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

npm

< 2026.3.1

2026.3.1

Description

Unauthorized senders could trigger two command paths without sender authorization checks:

An unauthorized sender could disrupt active sessions and view model/auth metadata that should be authorization-gated.

Sender authorization is now enforced for stop-like abort triggers and /models listings.

More vulnerabilities in openclaw

See all →