CVE-2026-100562
Received Received - Intake

Authorization Bypass in OpenClaw Sessions Endpoint

Publication date: 2026-09-26

Last updated on: 2026-09-26

Assigner: VulnCheck

Description
OpenClaw versions before 2026.8.1 contain an authorization bypass vulnerability in the sessions.create endpoint that allows operator.write callers to modify session configurations reserved for operator.admin scope. Attackers with write-scoped credentials can change existing session model, provider, thinking level, and auth-profile settings to redirect traffic and bypass administrative access controls.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-26
Last Modified
2026-09-26
Generated
2026-09-26
AI Q&A
2026-09-26
EPSS Evaluated
N/A
NVD
CVE-2026-100562
EUVD
EUVD-2026-87488

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
openclaw openclaw to 2026.8.1 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-863 The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

OpenClaw versions before 2026.8.1 have an authorization bypass vulnerability in the sessions.create endpoint. Attackers with write-scoped credentials can modify session configurations reserved for operator.admin scope, such as session model, provider, thinking level, and auth-profile settings. This allows them to redirect traffic and bypass administrative access controls.

Detection Guidance

Check OpenClaw versions before 2026.8.1 using commands like 'openclaw --version' or inspect package managers for outdated installations. Monitor logs for unauthorized modifications to session configurations via the sessions.create endpoint.

Impact Analysis

Attackers could redirect session traffic by altering configurations, potentially gaining unauthorized access to restricted resources. The impact is limited to models and credentials already configured by the operator, but it undermines administrative controls and could lead to data exposure or service disruption.

Compliance Impact

This vulnerability could lead to unauthorized access or data breaches, which may violate compliance requirements under GDPR, HIPAA, or other regulations. Bypassing administrative controls undermines data protection measures, potentially resulting in legal penalties or loss of trust.

Mitigation Strategies

Upgrade OpenClaw to version 2026.8.1 or later immediately. Avoid issuing write-only Gateway credentials to clients that can call keyed sessions.create before upgrading. Review and restrict access to session modification endpoints.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-100562. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart