OpenClaw versions before 2026.6.6 contain an authorization bypass vulnerability in the native web search feature. This flaw allows lower-trust callers to perform actions that normally require stronger policy checks by exploiting misconfigured input paths. The vulnerability could enable unauthorized execution of restricted operations.