Report: CVE-2026-32976 - OpenClaw < 2026.3.11 - Account-Scoped configWrites Policy Bypass via Channel Com

Report: CVE-2026-32976 - OpenClaw < 2026.3.11 - Account-Scoped configWrites Policy Bypass via Channel Com

CVE ID :CVE-2026-32976 Published : March 31, 2026, 11:17 a.m. | 40 minutes ago Description :OpenClaw before 2026.3.11 contains an authorization bypass vulnerability allowing channel commands to mutate protected sibling-account configuration despite configWrites restrictions. Attackers with authorized access on one account can execute channel commands like /config set channels..accounts. to modify configuration on target accounts with configWrites: false. Severity: 7.1 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE Details

Severity
HIGH
Published
March 31, 2026