A vulnerability in OpenClaw's QQBot streaming command allows mutation of configuration without requiring an explicit allowlist entry. Authenticated Gateway operators and trusted components remain unaffected unless separate policies are bypassed. The vulnerability can lead to unauthorized configuration changes if the feature is enabled and reachable. A patch is available in version 2026.4.29. Until patched, disabling the command or restricting it to trusted senders is recommended.