OpenClaw Privilege Escalation via Telegram Configuration and Cron Persistence Settings

OpenClaw, in versions prior to 2026.3.28, is vulnerable to a privilege escalation. An authenticated operator with operator.write credentials can leverage this vulnerability to access sensitive administrative functions. Specifically, the flaw resides in the send endpoint where insufficient access controls allow unauthorized modification of Telegram configurations and cron persistence settings, which are typically restricted to admin-level users. Successful exploitation allows an attacker to gain elevated privileges and control critical system configurations. This can lead to persistent backdoor access or manipulation of the bot's behavior.

Attack Chain

1. Attacker gains valid operator.write credentials through legitimate access or credential compromise.
2. Attacker authenticates to the OpenClaw instance.
3. Attacker crafts a malicious request to the /send endpoint.
4. The crafted request targets the Telegram configuration settings, bypassing access controls.
5. The attacker modifies sensitive Telegram configurations, potentially redirecting communications or impersonating the admin.
6. The attacker manipulates the cron persistence settings to execute arbitrary code at scheduled intervals.
7. The attacker establishes a persistent backdoor, maintaining unauthorized access to the system.

Impact

Successful exploitation of this vulnerability allows an attacker with limited operator.write privileges to gain administrative control over the OpenClaw instance. This could lead to unauthorized access to sensitive information, manipulation of the bot's functionality, or persistent backdoor access. The affected version is OpenClaw before 2026.3.28. There is no information about victim count or sectors targeted.

Recommendation

• Upgrade OpenClaw to version 2026.3.28 or later to patch CVE-2026-41359.
• Implement the Sigma rule Detect OpenClaw Cron Persistence Modification to monitor for unauthorized changes to cron jobs.
• Implement the Sigma rule Detect OpenClaw Telegram Configuration Modification to monitor for unauthorized changes to telegram configurations.