CVE-2026-32919 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

OpenClaw before 2026.3.11 contains an authorization bypass vulnerability allowing write-scoped callers to reach admin-only session reset logic. Attackers with o…
Medium CVSS: 6.9

CVE-2026-32919

OpenClaw before 2026.3.11 contains an authorization bypass vulnerability allowing write-scoped callers to reach admin-only session reset logic. Attackers with operator.write scope can issue agent requests containing /new or /reset slash commands to reset targeted conversation state without holding operator.admin privileges.
Vendor
Openclaw
Product
Openclaw
CWE
CWE-863
Yayın Tarihi
2026-03-29 13:17:00
Güncelleme
2026-03-31 18:08:30
Source Identifier
disclosure@vulncheck.com
KEV Date Added
-

Kategoriler

CWE-863 Openclaw MEDIUM Openclaw 2026

Referanslar

https://github.com/openclaw/openclaw/security/advisories/GHSA-jf6w-m8jw-jfxc https://www.vulncheck.com/advisories/openclaw-unauthorized-session-reset-via-agent-slash-commands