GitHub Advisoryadvisory · npm

GHSA-5r8f-96gm-5j6g OpenClaw Gateway `operator.write` can reach admin-only session reset via `chat.send` `/reset`

HIGH Published 2026-04-01 Modified 2026-04-01 Official page ↗
Ecosystem
npm
Packages
openclaw
Severity
High
CVSS vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N
Weaknesses
CWE-284, CWE-863
Reviewed
2026-04-01

Affected packages

• npm openclaw: < 2026.3.28 → fixed in 2026.3.28

Description

Summary The `chat.send` path reused command authorization to trigger `/reset` session rotation even though direct session reset is an admin-only control-plane operation. Impact A write-scoped gateway caller could rotate a target session, archive the prior transcript state, and force a new session id without admin scope. Affected Component `src/gateway/server-methods/chat.ts, src/auto-reply/reply/session.ts` Fixed Versions • Affected: `= 2026.3.28` • Latest stable `2026.3.28` contains the fix. Fix Fixed by commit `be00fcfccb` (`Gateway: align chat.send reset scope checks`).

Related

Weakness · CWE (2)

  • CWE-284 Improper Access Control weakness
  • CWE-863 Incorrect Authorization weakness

References