CVE-2026-34512 - Vulnerability Analysis

Overview

OpenClaw < 2026.3.25 contains an improper access control vulnerability in the HTTP /sessions/:sessionKey/kill route, letting bearer-authenticated users terminate arbitrary subagent sessions without proper scope validation, exploit requires bearer authentication.

Severity & Score

Impact

Authenticated attackers can terminate arbitrary admin-level sessions, bypassing ownership and scope restrictions, potentially disrupting operations.

Mitigation

Update to version 2026.3.25 or later.

References

• https://github.com/openclaw/openclaw/security/advisories/GHSA-9p93-7j67-5pc2
• https://www.vulncheck.com/advisories/openclaw-improper-access-control-in-sessions-sessionkey-kill-endpoint
• https://github.com/openclaw/openclaw/commit/02cf12371f9353a16455da01cc02e6c4ecfc4152

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner