Executive brief
OpenClaw, a tool used for managing native commands and gateway operations, contains a security flaw that allows regular users to bypass access controls. An authenticated user could exploit this to run administrative or 'owner-only' commands that they should not have permission to use. This could lead to unauthorized system changes, data access, or full control over the affected environment depending on the specific commands available.
Technical details
An authorization bypass vulnerability (CWE-863) exists in OpenClaw's native command handling logic. In affected versions prior to 2026.5.6, the system fails to properly enforce owner-only command policies when native command handling is triggered. An authenticated attacker with network access can bypass these access controls to execute privileged commands. The impact is highly dependent on the specific configuration and the commands exposed to the native handler. The issue is resolved in version 2026.5.6; users are advised to upgrade or limit native command surfaces to trusted senders as a mitigation.
Affected products
- OpenClaw OpenClaw < 2026.5.6
Timeline
- 2026-05-28: advisory: GitHub Security Advisory published
- 2026-06-12: disclosed: NVD publication date
- 2026-05-28: patched: Version 2026.5.6 released