OpenClaw versions prior to 2026.5.6 contain a vulnerability where Telegram interactive callbacks can bypass the commands.allowFrom sender allowlist. This allows a Telegram user invoking a callback to mark it as an authorized sender before the allowlist check is applied. The vulnerability affects only the Telegram callback feature and does not alter OpenClaw's trusted-operator model. The impact depends on the operator's configuration and whether untrusted input can reach the affected callback path. The issue is patched in version 2026.5.6. Until patched, restricting Telegram command callbacks to trusted chats and narrowing allowlists are recommended mitigations.