An authorization bypass vulnerability in OpenClaw allows authenticated users to approve unauthorized host execution requests, posing a significant risk of remote code execution.

The vulnerability is an incorrect authorization flaw (CWE-863) within the Discord text command interface. It allows any authenticated user with access to the Discord channel to bypass the allowlist and approve pending host execution requests that should be restricted to authorized approvers.

The ability for unauthorized users to approve host execution requests creates a critical security gap, potentially leading to total system compromise or unauthorized host control. With a CVSS score of 8.8, this high-severity vulnerability represents a significant threat to operational integrity and data security. Organizations relying on OpenClaw for automated tasks face potential unauthorized command execution if this flaw is left unpatched.

Immediate Action: Update the OpenClaw package to version 2026.3.28 or later via your package manager to resolve the authorization logic error.

Proactive Monitoring: Review Discord audit logs and OpenClaw execution logs for unexpected command approvals or commands originating from non-authorized user accounts.

Compensating Controls: Restrict access to the Discord channels where OpenClaw integration is active, limiting interaction to only verified and trusted service accounts until the update is deployed.

Public Exploit Available: Unknown.

This vulnerability presents a high risk due to the potential for unauthorized command execution within the OpenClaw environment. Administrators are advised to prioritize the update to version 2026.3.28 immediately. Failure to patch this issue could allow malicious actors to manipulate host execution workflows, leading to severe security consequences.