CVE-2026-32972: Openclaw Authorization Bypass Vulnerability

CVE-2026-32972 Overview

CVE-2026-32972 is an authorization bypass vulnerability in OpenClaw versions prior to 2026.3.11. The flaw resides in the browser.request route, which fails to enforce the operator.admin privilege required for browser profile management. Authenticated operators holding only the operator.write permission can reach admin-only routes and create or modify browser profiles. Successful exploitation lets attackers persist attacker-controlled remote Chrome DevTools Protocol (CDP) endpoints to disk. This weakness maps to CWE-863: Incorrect Authorization.

Critical Impact
Authenticated low-privilege operators can bypass admin authorization checks, write malicious browser profiles, and redirect automated browser sessions to attacker-controlled CDP endpoints.

Affected Products

OpenClaw (Node.js distribution) versions before 2026.3.11
Deployments exposing the browser.request route to operator-level accounts
Multi-tenant OpenClaw instances where operator.write is granted broadly

Discovery Timeline

2026-03-29 - CVE-2026-32972 published to NVD
2026-03-31 - Last updated in NVD database

Technical Details for CVE-2026-32972

Vulnerability Analysis

OpenClaw exposes a browser.request interface used by operators to invoke browser automation actions. The route handler dispatches profile management operations such as creating, updating, and persisting browser profile records that define which CDP endpoint a browser session should connect to.

The handler relies on a single permission check for operator.write to gate profile management operations. Profile creation and modification are admin-scoped functions that should require operator.admin. Because the check is missing or incorrectly evaluated, the action proceeds for any authenticated operator able to call browser.request. The result is a vertical authorization gap entirely within the application's role logic.

Once reached, the profile management logic writes attacker-supplied JSON fields to disk, including the remote CDP endpoint URL. Subsequent browser automation runs honor the persisted configuration. This converts a low-privilege API call into durable control over browser automation targets.

Root Cause

The root cause is incorrect authorization enforcement in the browser.request dispatcher. The handler treats profile management as an operator-write operation rather than an admin-only operation. No secondary check validates that the caller holds operator.admin before mutating profile state on disk.

Attack Vector

An authenticated operator with only the operator.write role sends a browser.request payload referencing the profile management action. The OpenClaw service accepts the request, executes the privileged action, and writes the supplied CDP endpoint to the profile store. Future browser sessions tied to that profile connect to the attacker's CDP endpoint, exposing automation traffic and any data driven through it. The vulnerability is network-reachable and requires no user interaction beyond the attacker's authenticated session. See the VulnCheck advisory for additional technical context.

Detection Methods for CVE-2026-32972

Indicators of Compromise

Unexpected creations or modifications of browser profile records by non-admin operator accounts.
Browser profile entries referencing remote CDP endpoints on untrusted hosts or non-loopback addresses.
browser.request invocations performing profile management actions from accounts that hold only operator.write.

Detection Strategies

Audit OpenClaw application logs for browser.request calls invoking profile create or update operations and correlate the caller's role.
Compare current on-disk browser profile configurations against a known-good baseline and flag drift in CDP endpoint URLs.
Alert on profile records pointing to external network destinations or unexpected schemes for the configured CDP target.

Monitoring Recommendations

Continuously monitor file integrity on the OpenClaw browser profile storage directory.
Capture outbound connection telemetry from OpenClaw worker processes and flag CDP traffic to unrecognized hosts.
Track role-assignment changes so any expansion of operator.write grants is reviewed and logged.

How to Mitigate CVE-2026-32972

Immediate Actions Required

Upgrade OpenClaw to version 2026.3.11 or later, which enforces operator.admin on browser profile management routes.
Review all accounts holding operator.write and revoke the permission where not required.
Inspect existing browser profile records for unauthorized CDP endpoints and revert them to known-good values.

Patch Information

The maintainers addressed the issue in OpenClaw 2026.3.11. Details are documented in the OpenClaw GitHub Security Advisory GHSA-vmhq-cqm9-6p7q. Operators running prior releases should upgrade immediately and verify the version after deployment.

Workarounds

Restrict access to the browser.request route at a reverse proxy or API gateway so only admin-scoped accounts can reach it.
Limit operator.write assignments to trusted accounts pending the upgrade.
Enforce egress filtering so OpenClaw hosts can only reach approved CDP endpoints.

bash

# Configuration example: upgrade OpenClaw and verify the patched version
npm install openclaw@2026.3.11
npx openclaw --version