OpenClaw contains a vulnerability in its native command authorization that may bypass owner-command enforcement. This allows a sender able to trigger native command handling to authorize commands that should be restricted to owners only. The vulnerability affects versions prior to 2026.5.6. The impact depends on the operator's configuration and whether untrusted input can reach the vulnerable code path. A fix is available in version 2026.5.6. Until patched, it is recommended to restrict native command access to trusted senders and limit channel and tool allowlists.