OpenClaw versions before 2026.6.9 have an authorization bypass vulnerability in the flock wrapper. This flaw allows lower-trust callers to perform or persist actions beyond their intended permissions by exploiting configured input paths. The vulnerability occurs when the affected feature is enabled, enabling attackers to bypass durable exec approval binding and carry out unauthorized operations.