OpenClaw versions prior to 2026.9.4 have an authorization vulnerability in the mcp.app.view method. This flaw allows users with operator.read tokens to perform actions that require operator.write scope by obtaining and redeeming a standalone ticket. This enables unauthorized invocation of state-changing tools without proper authorization checks.