An authorization bypass vulnerability in OpenClaw allows authenticated attackers to execute arbitrary code and install unauthorized plugins, posing a high risk to system integrity and confidentiality.

This is a Missing Authorization flaw (CWE-862) occurring within the Codex computer-use installation command. The vulnerability allows any authenticated user with channel access to bypass owner verification, enabling the execution of MCP processes and installation of plugins with the privileges of the OpenClaw user.

The vulnerability carries a CVSS score of 8.8, reflecting its high severity and potential for significant impact. Successful exploitation allows an attacker to gain unauthorized control over the application environment, potentially leading to full compromise of host system data integrity and unauthorized service operations. Such access could result in severe operational disruption and the potential for lateral movement within the host infrastructure.

Immediate Action: Upgrade OpenClaw to version 2026.7.1 or later to remediate the authorization check flaw.

Proactive Monitoring: Review application access logs for unexpected Codex installation commands or unauthorized plugin registration events originating from non-owner accounts.

Compensating Controls: Implement strict network segmentation and restrict channel access to authorized users only to minimize the exposure of the vulnerable installation endpoint.

Public Exploit Available: No (exploit_available: false)

Given the high CVSS score and the critical nature of authorization bypass vulnerabilities, organizations should treat this as a high-priority update. Administrators must ensure all OpenClaw instances are updated to version 2026.7.1 immediately to eliminate the risk of arbitrary plugin installation and unauthorized code execution.