OpenClaw versions prior to 2026.8.1 suffer a permissions bypass flaw in the sessions.create endpoint. Operator.write callers can edit session configuration options that are normally restricted to operator.admin. By changing parameters such as session model, provider, thinking level, and auth‑profile, an attacker can redirect traffic or otherwise alter session behavior, effectively circumventing administrative controls and potentially exposing sensitive data or disrupting service availability.

All deployments of OpenClaw released before version 2026.8.1 are impacted. The vulnerability applies to every installed instance that has not yet been patched to 2026.8.1 or later.

The CVSS score of 5.3 indicates moderate severity; EPSS data is not available and the vulnerability is not listed in CISA’s KEV catalog. Exploitation requires valid authentication with operator.write scope and access to the API endpoint, which is typically reachable over the network. Once performed, the attacker can modify session settings to redirect traffic or bypass administrative controls, potentially compromising confidentiality, integrity, and availability of the application’s session management.