CVE-2026-32050
Access Control Bypass in OpenClaw Signal Reaction Handling
Publication date: 2026-03-21
Last updated on: 2026-03-23
Assigner: VulnCheck
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| openclaw | openclaw | to 2026.2.25 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-863 | The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
CVE-2026-32050 is an access control vulnerability in OpenClaw versions prior to 2026.2.25. It occurs in the signal reaction notification handling mechanism, specifically in the reaction-only event path within the file event-handler.ts.
This flaw allows unauthorized attackers to enqueue reaction status events for sessions without proper direct message (DM) or group access validation, effectively bypassing authorization checks.
The vulnerability is classified under CWE-863 (Incorrect Authorization), meaning authorization checks are performed but not correctly enforced.
How can this vulnerability impact me? :
This vulnerability allows unauthorized senders to enqueue signal reaction status events in sessions where they do not have proper access rights.
While it does not allow unauthorized delivery of normal direct messages or execution of host commands, it can lead to unauthorized injection of reaction status lines, potentially causing confusion or manipulation of session state.
The impact on integrity is low, and there is no impact on confidentiality or availability, but the unauthorized enqueueing of events can still affect the trustworthiness of session interactions.
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
I don't know
How can this vulnerability be detected on my network or system? Can you suggest some commands?
I don't know
What immediate steps should I take to mitigate this vulnerability?
To mitigate the vulnerability CVE-2026-32050, you should upgrade OpenClaw to version 2026.2.25 or later.
This update enforces proper authorization checks before enqueuing reaction notification status events, preventing unauthorized senders from bypassing access controls.