Incorrect Authorization

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Incorrect Authorization via the sessionstatus process. An attacker can gain unauthorized access to parent or sibling sessions by bypassing sandboxed session-tree visibility checks after...