Openclaw cli: OpenClaw: Authenticated `/hooks/wake` and mapped `wake` payloads are promoted into the trusted `System:` prompt channel

The OpenClaw CLI has a security flaw in versions up to 2026.4.2 where authenticated wake hooks or mapped wake payloads are escalated into the trusted System prompt channel. This means that these payloads, which should be treated as untrusted events, gain elevated trust within the system's prompt channel. The vulnerability is scoped to the OpenClaw trust model and applies to local user-controlled environments. The issue was fixed in the main branch and released in version 2026.4.8, with verification including regression tests against the affected security boundary.

An attacker with authenticated access to the `/hooks/wake` endpoint or the ability to provide mapped wake payloads could have these payloads promoted to the trusted System prompt channel. This elevation of trust could potentially allow execution or actions with higher privileges within the OpenClaw CLI environment, undermining the intended security boundaries. The impact is limited to environments where the attacker has authenticated access and does not extend to multi-tenant service boundaries.

A patch is available and should be applied. Users should upgrade OpenClaw CLI to version 2026.4.8 or later, which contains the fix. The fix has been verified with regression tests. No additional mitigation steps are indicated by the vendor advisory.