OpenClaw Policy Bypass Vulnerability Allowing Unauthorized Command Execution

A policy bypass vulnerability has been identified in OpenClaw versions prior to 2026.3.22. This vulnerability arises because queued node actions are not revalidated against the current command policy at the time of delivery. As a result, stale allowlists or declarations can persist through policy changes, enabling the execution of unauthorized commands.

Impact

Exploitation of this vulnerability allows for unauthorized command execution on nodes where the policy has been tightened, but stale allowlists or declarations remain.

Reproduction

To reproduce this vulnerability, first, create a node action that is allowed by the current policy. Then, tighten the command policy to disallow that action. When the queued action is delivered, it will bypass the new policy and execute the action, demonstrating the policy bypass vulnerability.

Remediation

Users can update to OpenClaw version 2026.3.22 or later, where this vulnerability has been fixed.