OpenClaw versions prior to 2026.5.7 have a vulnerability where trusted retry endpoint checks may incorrectly validate URLs by matching hostname prefixes rather than exact hostnames. This can allow lower-trust input to specify a retry endpoint URL that appears to be trusted but actually directs authentication material to an unintended external endpoint. The vulnerability affects the retry endpoint feature when enabled and reachable. The issue is mitigated by pinning retry endpoints to exact trusted origins and restricting access until the patched version is deployed.