~ / search / GHSA-h4jx-hjr3-fhgc

GHSA-h4jx-hjr3-fhgc

OpenClaw: Gateway Plugin Subagent Fallback `deleteSession` Uses Synthetic `operator.admin`

Source: GitHub Advisory Database (reviewed) Moderate CVE-2026-35645

Packages

EcosystemPackageAffectedFixed in
npm openclaw < 2026.3.28 2026.3.28

Details

As written in the advisory (Markdown source, shown as plain text).

## Summary Gateway Plugin Subagent Fallback `deleteSession` Uses Synthetic `operator.admin` ## Affected Packages / Versions - Package: `openclaw` - Affected versions: `<= 2026.3.24` - First patched version: `2026.3.25` - Latest published npm version at verification time: `2026.3.24` ## Details Gateway plugin subagent fallback `deleteSession` previously dispatched `sessions.delete` with a synthetic `operator.admin` runtime scope when no request-scoped client existed. Commit `b5d785f1a59a56c3471f2cef328f7c9a6c15f3e7` binds deletion to the caller scope instead of minting admin scope. Verified vulnerable on tag `v2026.3.24` and fixed on `main` by commit `b5d785f1a59a56c3471f2cef328f7c9a6c15f3e7`. ## Fix Commit(s) - `b5d785f1a59a56c3471f2cef328f7c9a6c15f3e7`

References

External links from the advisory. They lead to third-party sites.