The vulnerability is an authorization bypass that allows a non‑owner user to request the /export-trajectory endpoint, causing the server to return an entire trajectory bundle that belongs to the session owner. This bundle contains prompts, model messages, tool schemas, runtime events, and local path metadata, meaning a malicious actor can read confidential information that should be restricted to the owner. The weakness is a lack of proper authorization checks and is classified as CWE-200.

Products affected are OpenClaw before version 2026.7.1. The vendor OpenClaw, product OpenClaw is impacted, and any deployment using an earlier release than 2026.7.1 is potentially vulnerable.

The CVSS score of 7.1 categorises the issue as high severity. EPSS data is not available, and the vulnerability is not listed in the CISA KEV catalog, suggesting that it has not yet been widely exploited in the wild. The likely attack vector is remote, via an HTTP request to the /export-trajectory endpoint, and does not require elevated privileges beyond the ability to access the exposed path. An attacker can simply issue the request and receive sensitive bundle data, leading to a confidentiality breach.