OpenClaw before 2026.5.18 contains an authorization bypass vulnerability in QQBot native approval buttons that fails to enforce configured approver identity. Non-approver users can click approval buttons to resolve pending exec or plugin approval requests without proper authorization.
| Vendor | Product | Versions |
|---|---|---|
| openclaw | openclaw | 0 |
Updated affected versions to include 2026.5.17, changed severity to CRITICAL, and noted that no exploit is available.
Initial creation
