OpenClaw versions before 2026.6.6 contain an authorization bypass vulnerability that allows WhatsApp group IDs to satisfy elevated sender allowlists. This flaw enables attackers with lower-trust access to perform actions that normally require stronger authorization by exploiting group ID validation. No patch or fix information is currently provided for this vulnerability.