https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-28T17:46:33.575103+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-41344 CVE-2026-41344 — OpenClaw < 2026.3.28 - Privilege Escalation via chat.send /verbose Parameter 2026-09-28T17:46:33.609603+00:00

Affected: OpenClaw

OpenClaw before 2026.3.28 contains a privilege escalation vulnerability in the chat.send endpoint that allows write-scoped gateway callers to persist admin-only verboseLevel session overrides. Attackers can exploit the /verbose parameter to bypass access controls and expose sensitive reasoning or tool output intended to be restricted to administrators.

 https://vulnerability.circl.lu/vuln/ghsa-5h2w-qmfp-ggp6 GHSA-5h2w-qmfp-ggp6 — OpenClaw: Gateway `operator.write` can reach admin-only persisted `verboseLevel` via `chat.send` `/verbose` 2026-09-28T17:46:33.609943+00:00

Affected: npm: openclaw

## Summary

The `chat.send` path let authorized write-scoped callers persist `/verbose` session overrides even though the same stored session mutation is admin-only through `sessions.patch`.

## Impact

A write-scoped gateway caller could persist verbose output for later runs and expose more reasoning or tool output than the operator intended.

## Affected Component

`src/auto-reply/reply/directive-handling.impl.ts, src/gateway/sessions-patch.ts`

## Fixed Versions

- Affected: `<= 2026.3.24` - Patched: `>= 2026.3.28` - Latest stable `2026.3.28` contains the fix.

## Fix

Fixed by commit `c603123528` (`fix(gateway): require admin for persisted verbose defaults`).