CVE-2026-45001

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.4.20

Description A guard bypass exists in the agent-facing gateway endpoints "config.patch" and "config.apply". This issue fails to protect operator-trusted settings, including sandbox policy, plugin enablement, gateway auth/TLS, hook routing, MCP server configuration, SSRF policy, and filesystem hardening. A prompt-injected model with access to the owner-only gateway tool can persist unauthorized changes to these protected operator settings.

Recommendations Update to version 2026.4.20 or later.