OpenClaw Authorization Bypass Vulnerability in QQBot Approval Buttons

An authorization bypass vulnerability has been identified in OpenClaw versions prior to 2026.5.18. The issue resides in the QQBot native approval buttons, which do not properly enforce the configured approver identity. As a result, non-approver users can click these buttons to approve pending execution or plugin requests without the necessary authorization.

Impact

Exploitation of this vulnerability allows non-approver users to resolve pending execution or plugin approval requests, potentially leading to unauthorized execution of actions that should require an approved identity.

Remediation

Users are advised to upgrade to OpenClaw version 2026.5.18 or later. Before upgrading, avoid sending native approval buttons in QQ conversations with users who are not authorized approvers.