OpenClaw: Scoped chat.send route inheritance could bypass admin command scope gates
- Product
- OpenClaw
- Affected
- npm/openclaw < 2026.5.18
- Fixed in
- 2026.5.18
Last verified against sources: October 26, 2026
Am I affected?
OpenClaw: affected npm/openclaw < 2026.5.18. Fixed in 2026.5.18.
- Check your version: run
npm ls openclaw. Versions < 2026.5.18 of openclaw are affected. [1]
What to do now
- Upgrade to the fixed version: run
npm install openclaw@2026.5.18(first patched version 2026.5.18). [1] - Upgrade to
openclaw@2026.5.18or later. [1] - Before upgrading, avoid granting
operator.writetokens to clients that can deliver commands into sessions with external routes unless those clients are trusted with admin-like command effects. [1]
General practice, not from the source: if the affected software could read tokens or credentials, rotate them after upgrading; pin versions and review changes before updating tools your agents run.
What happened
- Some internal command handlers require
operator.approvalsoroperator.adminscopes. [1] - In affected releases, a scoped Gateway
chat.sendrequest delivered through an inherited external route could be evaluated as an external-channel command while still carrying the lower Gateway client scopes. [1] - This issue affects scoped Gateway clients. [1]
Impact
What was done
- The first stable patched version is
2026.5.18. [1]
Sources
- GHSA-hw9r-h9mr-4jff — GitHub Advisory Database
Every statement above was checked against these sources before publishing. Spotted an error? Tell us and we will correct it with a dated note.
Share advisory brief with your team
Copy a plain-text summary for Slack, GitHub issues, or team security channels.
OpenClaw: Scoped chat.send route inheritance could bypass admin command scope gates
Product: OpenClaw | Affected: npm/openclaw < 2026.5.18 | Fixed in: 2026.5.18
Summary: Some internal command handlers require `operator.approvals` or `operator.admin` scopes.
Source & remediation on AgentArmorHQ: https://agentarmorhq.com/incidents/2026/07/ghsa-hw9r-h9mr-4jff-openclawCorrections
Report an error or request a correction. We review requests within 5 business days and add a dated correction note.
Discussions for OpenClaw
Ask questions or share configuration tips. Governed by our Community Rules & Terms.
No posts match this filter yet.
Be the first to ask a question or share a working tip.