Openclaw cli: OpenClaw: QQBot streaming command could mutate config without explicit allowFrom (CVE-2026-53833)

The QQBot streaming command in OpenClaw CLI versions >=2026.1.29 and <2026.4.29 can mutate configuration without needing an explicit non-wildcard allowFrom entry. This means a QQBot sender with access to the affected command could change configuration settings outside the intended administrative policy. The vulnerability does not alter the trusted-operator model of OpenClaw, which assumes authenticated Gateway operators and installed plugins are trusted. The practical impact depends on the operator's configuration and whether lower-trust inputs can reach the vulnerable command path. The issue is fixed in version 2026.4.29.

If the affected QQBot streaming command is enabled and reachable, an attacker with access to the command could modify the QQBot streaming configuration without proper authorization, potentially violating administrative policies. This could lead to unauthorized configuration changes with high confidentiality and integrity impact, but no availability impact is noted. The severity is high with a CVSS score of 7.7.

A patch is available in OpenClaw CLI version 2026.4.29. Until patched, disable the affected QQBot streaming command or restrict its usage to explicitly trusted QQBot senders. Additionally, narrow channel and tool allowlists, avoid sharing a Gateway between mutually untrusted users, and disable the affected feature if not needed.