Threats tagged 'ghsa-8wcm-622f-3r46'

OpenClaw versions prior to 2026.4.23 have an improper access control vulnerability in the gateway tool's config.apply and config.patch operations. This flaw allows compromised models to bypass an incomplete denylist protection and write unsafe configuration changes. Malicious modifications can persist across restarts, affecting command execution, network behavior, credentials, and operator policies.