Threat Intelligence Database

OpenClaw versions before 2026.6.6 have a vulnerability in the host exec environment variable filtering that fails to properly sanitize rustup startup variables. This flaw allows attackers with limited trust or specific input path configurations to execute or persist actions beyond their authorized level. The vulnerability is categorized under CWE-184 (Improper Access Control) and is assessed as high severity.

OpenClaw versions 2026.4.12-beta.1 before 2026.6.6 contain a missing-authorization vulnerability in the MS Teams message actions feature. When the affected feature is enabled and reachable, a lower-trust caller or a configured input path can perform actions that should have required a stronger authorization or policy check. Practical impact depends on the operator's configuration and whether lower-trust input can reach that path. The issue is fixed in 2026.6.6.

OpenClaw versions 2026.6.1 before 2026.6.9 contain a privilege escalation vulnerability in isolated cron jobs that allows lower-trust callers to regain denied execution tools. Attackers can execute or persist actions beyond their intended authorization by leveraging misconfigured input paths in the affected cron feature.

OpenClaw versions before 2026.6.5 contain an authorization bypass vulnerability in the ClickClack agent-mode dispatch feature. This flaw allows the toolsAllow policy check to be ignored, potentially enabling lower-trust callers or configured input paths to perform actions requiring stronger authorization. The vulnerability is categorized under CWE-863 (Incorrect Authorization). No patch or fix information is currently provided.

OpenClaw versions before 2026.5.27 contain an authorization bypass vulnerability in the device.pair.approve feature. This flaw allows lower-trust callers to bypass role-management checks and perform actions that normally require stronger authorization.

OpenClaw versions before 2026.5.27 contain an authorization flaw in the QQBot exec approvals feature. This flaw allows lower-trust callers or configured input paths to execute or persist actions beyond their intended authorization. As a result, non-allowlisted senders may perform unauthorized operations when the feature is enabled and reachable.

OpenClaw versions before 2026.5.22 have a vulnerability in the setup-mode discovery process that permits loading untrusted workspace plugins. This flaw allows attackers with lower-trust caller access or control over configured input paths to execute or maintain actions beyond their authorized level.

OpenClaw versions before 2026.6.9 have an authorization bypass vulnerability in the flock wrapper. This flaw allows lower-trust callers to perform or persist actions beyond their intended permissions by exploiting configured input paths. The vulnerability occurs when the affected feature is enabled, enabling attackers to bypass durable exec approval binding and carry out unauthorized operations.

OpenClaw versions 2026.6.6 before 2026.6.9 have an authorization bypass vulnerability affecting Discord guild actions. This flaw allows lower-trust callers to perform actions that normally require stronger authorization. The vulnerability arises from misconfigured input paths that enable skipping cross-provider requester authorization, leading to execution of restricted operations.

OpenClaw versions before 2026.6.8 have an authorization bypass vulnerability in OpenAI-compatible HTTP model overrides. This flaw allows lower-trust callers to perform actions that normally require stronger authorization. Exploitation involves misconfigured input paths that bypass admin authorization policies and enable execution of restricted operations.