Description
OpenClaw before 2026.4.29 contains a policy bypass vulnerability in QQBot admin commands that allows authenticated senders to skip DM-only and allowFrom policy checks. Attackers can route admin commands from unauthorized senders or contexts to execute restricted behavior that policy should have blocked.
Problem types
Product status
Any version before 2026.4.29
2026.4.29 (semver)
Credits
Dikai Zou
References
github.com/...enclaw/security/advisories/GHSA-w4v6-g3wm-w36c (GitHub Security Advisory (GHSA-w4v6-g3wm-w36c))
www.vulncheck.com/...mmands-via-dm-only-and-allowfrom-checks