OpenClaw versions from 2026.6.5 up to but not including 2026.6.9 contain a vulnerability in the plugin install wrappers that can bypass the install policy authorization check. This allows a lower-trust caller or configured input path to execute or persist actions beyond their intended authorization. The impact depends on the operator's configuration and whether lower-trust input can reach the vulnerable code path. The issue is fixed in version 2026.6.9.