OpenClaw versions prior to 2026.6.6 contain an authorization bypass vulnerability in the MCP loopback feature. This flaw allows lower-trust callers to execute owner-only tools by bypassing authorization checks through configured input paths. The vulnerability enables unauthorized execution or persistence of actions beyond intended permissions.