OpenClaw Authorization Bypass Vulnerability in Chat Command Handling

A vulnerability allowing authorization bypass has been identified in OpenClaw versions prior to 2026.2.2. This issue arises because clients with 'operator.write' scope can approve or deny execution approval requests by sending the '/approve' chat command. The command bypasses the necessary permission check by invoking 'exec.approval.resolve' through an internal privileged gateway client, allowing unauthorized approval of exec requests.

Impact

Exploitation of this vulnerability allows unauthorized clients to approve or deny execution approval requests, potentially disrupting intended workflows or processes that rely on proper authorization.

Remediation

Users are advised to upgrade to OpenClaw version 2026.2.2 or later. If an upgrade is not possible, avoid issuing write-only device tokens to untrusted clients, disable text commands, or restrict access to the webchat or control UI.