CVE-2026-27004
📋 TL;DR
OpenClaw session tools allowed broader session targeting than intended in shared-agent deployments, potentially exposing transcript content across peer sessions in multi-user environments. The vulnerability also affected Telegram webhook mode where account-level secret wiring could be missed. This primarily impacts shared-agent deployments with untrusted peers.
💻 Affected Systems
- OpenClaw
📦 What is this software?
Openclaw by Openclaw
⚠️ Risk & Real-World Impact
Worst Case
In shared-agent deployments with untrusted users, attackers could access and potentially manipulate session transcripts of other users, leading to data exposure and privacy violations.
Likely Case
In multi-user environments with varying trust levels, users could inadvertently or intentionally access session data from peers they shouldn't have access to.
If Mitigated
In single-agent deployments or trusted environments with proper access controls, the impact is minimal to non-existent.
🎯 Exploit Status
Exploitation requires access to the session tools in a shared-agent deployment. The vulnerability is configuration-based rather than requiring complex technical exploitation.
🛠️ Fix & Mitigation
✅ Official Fix
Patch Version: 2026.2.15
Vendor Advisory: https://github.com/openclaw/openclaw/security/advisories/GHSA-6hf3-mhgc-cm65
Restart Required: Yes
Instructions:
1. Update OpenClaw to version 2026.2.15 or later. 2. Restart the OpenClaw service. 3. Verify the update was successful.
🔧 Temporary Workarounds
Restrict shared-agent deployments
allAvoid using shared-agent deployments with untrusted users until patched
Configure explicit webhook secrets
allIn Telegram webhook mode, ensure explicit monitor webhook secret overrides are configured
🧯 If You Can't Patch
- Isolate shared-agent deployments to trusted users only
- Implement additional access controls and monitoring for session tool usage
🔍 How to Verify
Check if Vulnerable:
Check OpenClaw version. If version is earlier than 2026.2.15 and using shared-agent deployment, the system is vulnerable.Check Version:
openclaw --versionVerify Fix Applied:
Verify OpenClaw version is 2026.2.15 or later and test session tool access controls in shared-agent environment.📡 Detection & Monitoring
Log Indicators:
- Unauthorized access attempts to session tools
- Unexpected session data access patterns
Network Indicators:
- Unusual API calls to session endpoints in shared-agent deployments
SIEM Query:
source="openclaw" AND (event="sessions_list" OR event="sessions_history" OR event="sessions_send") AND user!="expected_user"