The OpenClaw npm package (versions >= 2026.5.2 and < 2026.8.1) has an authorization bypass vulnerability related to WhatsApp group command handling. A group sender who is authorized to send ordinary messages but denied command authorization can exploit the /new <model> command to reset the shared group session and persist a provider and model override. This enables a command-denied group member to select a provider and model already permitted by the operator for subsequent interactions, potentially impacting provider routing, cost, data flow, or availability. The vulnerability does not allow adding new providers or executing host commands. The issue is resolved in version 2026.8.1.

An attacker who is a group member but denied command authorization can manipulate the shared group session by resetting it and overriding provider and model settings. This can affect how requests are routed, potentially influencing operational costs, data flow, or service availability. However, the attacker cannot add new providers or execute arbitrary host commands. The CVSS v3.1 score is 6.3, indicating a medium severity impact with limited confidentiality, integrity, and availability impacts.

Upgrade OpenClaw to version 2026.8.1 or later, where this authorization vulnerability is fixed. No other mitigation steps are indicated or necessary as the fix addresses the root cause.