An incorrect authorization vulnerability in OpenClaw allows an authenticated attacker to bypass intended security restrictions via malicious chat commands.

This vulnerability (CWE-863) involves a failure to correctly enforce authorization checks when processing the 'approve' chat command. An authenticated attacker can manipulate this function to perform unauthorized actions, bypassing the application's intended security controls.

While the CVSS score is 8.1, the requirement for authentication limits the initial attack surface. However, successful exploitation could lead to unauthorized administrative actions, potentially resulting in data manipulation or service disruption within the OpenClaw environment.

Immediate Action: Update the OpenClaw package to version 2026.2.2 via the npm package manager.

Proactive Monitoring: Monitor chat command logs for suspicious or unauthorized usage of the 'approve' function by non-privileged accounts.

Compensating Controls: Temporarily restrict the usage of chat commands for non-administrative roles if immediate patching is not feasible.

Public Exploit Available: Unknown.

All OpenClaw deployments should be updated to version 2026.2.2 immediately. Given the availability of a specific fix in the npm package repository, the remediation effort is low-complexity and should be prioritized to prevent potential privilege escalation.