A critical vulnerability in OpenClaw allows authenticated remote attackers to bypass security controls and execute unauthorized operations by disabling agentic consent mechanisms.

This flaw, identified as CWE-862 (Missing Authorization), occurs within the agentic consent framework. An authenticated attacker can leverage the config.patch parameter to silently disable required execution approvals, permitting the unauthorized performance of operations without user consent.

The ability for an attacker to bypass consent controls poses a severe risk to the integrity and security of automated operations within the environment. Given the CVSS score of 8.8, this vulnerability is classified as High severity, as it enables unauthorized administrative-level actions that could lead to complete system compromise or data manipulation.

Immediate Action: Update the OpenClaw package to version 2026.3.28 or later to resolve the underlying authorization flaw.

Proactive Monitoring: Review access and configuration logs for any unusual modifications to the config.patch parameter or unexpected agent behavior.

Compensating Controls: Restrict access to the configuration interfaces that allow modification of agent settings to only highly privileged, trusted service accounts.

Public Exploit Available: No

The severity of this authorization bypass necessitates immediate attention. Administrators must prioritize updating to the patched version, 2026.3.28, to ensure that agentic consent controls are properly enforced and to prevent unauthorized remote execution of operations.