An authorization bypass vulnerability in OpenClaw allows authenticated attackers with direct message pairing to execute unauthorized room control commands, risking total system compromise.

This is an incorrect authorization flaw (CWE-863) residing in the Matrix room control command authorization mechanism, which improperly trusts direct message pairing store entries. The attacker requires low privileges through a direct message paired sender ID.

A successful exploitation of this vulnerability permits attackers to bypass configured allowlists and execute privileged room control commands within bot rooms. Given the high CVSS score of 8.8, this risk translates into potential total confidentiality, integrity, and availability impact, threatening critical business communications and automated operational infrastructure.

Immediate Action: Update OpenClaw to version 2026.4.15 or later to resolve the authorization logic flaw.

Proactive Monitoring: Monitor access and chat logs for unusual command executions within bot rooms originating from unexpected direct message participants.

Compensating Controls: Restrict bot room access and review Matrix integration permissions to limit potential exposure until updates are applied.

Public Exploit Available: No

This vulnerability presents a severe risk to environments utilizing OpenClaw and Matrix integrations due to the potential for unauthorized command execution. Administrators should apply the vendor security update immediately to version 2026.4.15 or later to neutralize the authorization bypass vector and secure affected systems.