CVE-2026-32067

CVE-2026-32067 details an authorization bypass vulnerability in OpenClaw versions prior to 2026.2.26. This flaw allows an attacker, once approved as a sender in one account, to be automatically accepted in other accounts within multi-account deployments, thereby circumventing explicit authorization boundaries. Rated 8.1 HIGH, the vulnerability has a network attack vector and low attack complexity, requiring only low privileges to achieve high impact on confidentiality and integrity. There is currently no evidence of active exploitation, nor is public exploit code available for this vulnerability. Furthermore, community discussion and media coverage remain at zero, indicating very low public awareness or attention.