CyberRota Analysis
AI-GeneratedOpenClaw versions prior to 2026.5.27 are vulnerable due to an authorization flaw in the QQBot exec approvals feature, which can be exploited by lower-trust callers to execute unauthorized actions. This could lead to unauthorized operations being performed by non-allowlisted senders, potentially compromising system integrity. Organizations using affected versions should prioritize patching to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
OpenClaw 2026.5.14-beta.1 before 2026.5.27 contain an authorization flaw in the QQBot exec approvals feature. When the feature is enabled and reachable, a lower-trust caller or configured input path could execute or persist actions beyond the caller's intended authorization, allowing non-allowlisted senders to perform unauthorized operations.
Related CVEs
Other vulnerabilities affecting the same vendor(s)