Executive brief
OpenClaw, a tool used for managing Telegram bot interactions, contains a security flaw in how it validates user permissions. An authenticated user can bypass configured sender restrictions by using specific interactive callbacks, allowing them to execute commands they should not have access to. This could lead to unauthorized control over the bot's functions or access to sensitive operations. Users should update to version 2026.5.6 to resolve this issue.
Technical details
An authorization bypass vulnerability (CWE-863) exists in OpenClaw's Telegram interactive callback handling. The root cause is a logic error where a user can invoke a callback that marks them as an authorized sender before the 'commands.allowFrom' allowlist validation is applied. This allows an authenticated attacker to bypass configured sender restrictions and trigger command behaviors. The vulnerability is reachable over the network and requires basic authentication (PR:L). A fix is available in version 2026.5.6.
Affected products
- OpenClaw openclaw < 2026.5.6
Timeline
- 2026-05-28: advisory: GitHub Security Advisory published
- 2026-06-11: disclosed: NVD publication date