GHSA-p73f-w79w-jqr5: OpenClaw: Native command authorization could skip owner-command enforcement
OpenClaw contains a vulnerability in its native command authorization that may bypass owner-command enforcement. This allows a sender able to trigger native command handling to authorize commands that should be restricted to owners only. The vulnerability affects versions prior to 2026.5.6. The impact depends on the operator's configuration and whether untrusted input can reach the vulnerable code path. A fix is available in version 2026.5.6. Until patched, it is recommended to restrict native command access to trusted senders and limit channel and tool allowlists.
AI Analysis
Technical Summary
The vulnerability in OpenClaw involves native command authorization skipping the enforcement of owner-only command policies. Specifically, a sender capable of triggering native command handling can authorize commands without the configured owner restrictions being applied. This issue does not alter the trusted-operator model of OpenClaw but affects the named feature and configuration where native command authorization is enabled and reachable. The vulnerability is addressed in OpenClaw version 2026.5.6.
Potential Impact
When the affected feature is enabled and accessible, an unauthorized sender may execute commands reserved for owners, potentially leading to unauthorized command execution. The practical impact depends on the operator's configuration and whether lower-trust inputs can reach the vulnerable authorization path. This could undermine access controls intended to restrict certain commands to owner-level users.
Mitigation Recommendations
A fix is available in OpenClaw version 2026.5.6. Until systems are updated, it is advised to restrict native command surfaces to trusted senders only. Operators should maintain narrow channel and tool allowlists, avoid sharing a Gateway among mutually untrusted users, and disable the affected feature if it is not required. These mitigations reduce the risk of unauthorized command execution until the official patch is applied.
GHSA-p73f-w79w-jqr5: OpenClaw: Native command authorization could skip owner-command enforcement
Description
OpenClaw contains a vulnerability in its native command authorization that may bypass owner-command enforcement. This allows a sender able to trigger native command handling to authorize commands that should be restricted to owners only. The vulnerability affects versions prior to 2026.5.6. The impact depends on the operator's configuration and whether untrusted input can reach the vulnerable code path. A fix is available in version 2026.5.6. Until patched, it is recommended to restrict native command access to trusted senders and limit channel and tool allowlists.
CVSS v4.0
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability in OpenClaw involves native command authorization skipping the enforcement of owner-only command policies. Specifically, a sender capable of triggering native command handling can authorize commands without the configured owner restrictions being applied. This issue does not alter the trusted-operator model of OpenClaw but affects the named feature and configuration where native command authorization is enabled and reachable. The vulnerability is addressed in OpenClaw version 2026.5.6.
Potential Impact
When the affected feature is enabled and accessible, an unauthorized sender may execute commands reserved for owners, potentially leading to unauthorized command execution. The practical impact depends on the operator's configuration and whether lower-trust inputs can reach the vulnerable authorization path. This could undermine access controls intended to restrict certain commands to owner-level users.
Mitigation Recommendations
A fix is available in OpenClaw version 2026.5.6. Until systems are updated, it is advised to restrict native command surfaces to trusted senders only. Operators should maintain narrow channel and tool allowlists, avoid sharing a Gateway among mutually untrusted users, and disable the affected feature if it is not required. These mitigations reduce the risk of unauthorized command execution until the official patch is applied.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-p73f-w79w-jqr5
- Osv Schema Version
- 1.4.0
- Aliases
- []
- Ecosystems
- ["npm"]
- Database Specific Severity
- HIGH
- Cvss Version
- 4.0
Threat ID: 6a46ecc527e9c7971943d823
Added to database: 07/02/2026, 22:57:09 UTC
Last enriched: 07/02/2026, 23:18:01 UTC
Last updated: 07/02/2026, 23:18:01 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.