A vulnerability has been found in OpenClaw up to 2026.3.10 and classified as problematic. The impacted element is an unknown function of the component session_status. The manipulation of the argument sessionKey leads to incorrect authorization.
This vulnerability is traded as CVE-2026-32918. An attack has to be approached locally. There is no exploit available.
The affected component should be upgraded.
