An authorization bypass vulnerability in OpenClaw allows authenticated non-owner users to escalate privileges and access sensitive server credentials.

This is an improper authorization flaw (CWE-863) where the skill tool dispatch mechanism fails to validate the owner status of a sender. Any authenticated user with permission to invoke skill commands can trigger this vulnerability to bypass access controls and gain unauthorized administrative privileges.

The vulnerability presents a significant risk to organizational security by exposing sensitive administrative tools and server credentials to unauthorized internal users. With a CVSS score of 8.3, this high-severity flaw could lead to complete system compromise if an attacker leverages these credentials to pivot deeper into the infrastructure. The potential for unauthorized data access and configuration manipulation poses a severe threat to operational integrity.

Immediate Action: Upgrade OpenClaw to version 2026.8.1 or later to implement the necessary authorization checks.

Proactive Monitoring: Review access logs for suspicious activity related to skill tool execution, specifically focusing on non-owner accounts invoking functions typically reserved for administrators.

Compensating Controls: Restrict access to the skill tool dispatch functionality to the minimum number of users required for operations until the patch can be applied.

Public Exploit Available: No (exploit_available: false)

Given the high CVSS score and the direct impact on server credentials, this vulnerability should be addressed as a high priority. Administrators must prioritize the deployment of version 2026.8.1 to ensure that authorization logic is correctly enforced. Failure to patch may allow malicious actors to abuse internal user accounts to gain full control over the OpenClaw environment.