| Package | Affected versions | Patched versions |
|---|---|---|
| openclaw | < 2026.3.25 | 2026.3.25 |
| openclaw | ≤ 2026.3.24 |
Gateway Plugin HTTP auth: "gateway" Mints operator.admin Runtime Scope
openclaw<= 2026.3.242026.3.252026.3.24Gateway-authenticated plugin HTTP routes previously created a runtime scope set that included operator.admin regardless of caller-granted scopes. Commit ec2dbcff9afd8a52e00de054b506c91726d9fbbe keeps plugin HTTP runtime scopes least-privileged and preserves caller scope boundaries.
Verified vulnerable on tag v2026.3.24 and fixed on main by commit ec2dbcff9afd8a52e00de054b506c91726d9fbbe.
ec2dbcff9afd8a52e00de054b506c91726d9fbbeRunning one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free