Executive brief
OpenClaw is a gateway and automation tool. A vulnerability in its 'focus' command allows users to bypass intended security restrictions and change the system's focus state without proper authorization. This could allow a low-privileged user to interfere with operations or access areas of the system they should not be able to control.
Technical details
A missing authorization vulnerability (CWE-862) exists in the OpenClaw 'focus' command. The root cause is a failure to enforce the 'controlScope' check when the command is triggered, allowing a caller to execute the command outside of their intended authority. An attacker with local access and low privileges can exploit this to modify the focus state of the system. The vulnerability is addressed in version 2026.4.25. Mitigations include restricting access to the focus command to trusted operators and narrowing tool allowlists.
Affected products
- OpenClaw openclaw <= 2026.4.24
Timeline
- 2026-05-28: disclosed: Initial disclosure by reporter
- 2026-06-18: advisory: GitHub Advisory published
- 2026.4.25: patched: First stable patched version released