OpenClaw MCP SSE redirects could forward Authorization headers, allowing a lower-trust caller or configured input path to execute or persist actions beyond their intended authorization. This vulnerability affects versions prior to 2026.6.5. The impact depends on the operator's configuration and whether lower-trust input can reach the vulnerable path. The issue is limited to the named feature and does not affect the trusted-operator model of OpenClaw. A fix is available in version 2026.6.5. Until upgrading, it is recommended to restrict the affected feature to trusted operators or disable it if not needed.