A vulnerability has been found in OpenClaw up to 2026.3.0 and classified as problematic. Impacted is the function
sessions_spawn. This manipulation causes incorrect permission assignment.
The identification of this vulnerability is CVE-2026-32048. It is possible to initiate the attack remotely. There is no exploit available.
The affected component should be upgraded.
