OpenClaw Authorization Bypass Vulnerability (CVE-2026-41303)

OpenClaw, a yet-to-be-defined application, is vulnerable to an authorization bypass (CVE-2026-41303) affecting versions prior to 2026.3.28. This vulnerability enables unauthorized users to approve pending execution requests by exploiting Discord text commands. Attackers can bypass the channels.discord.execApprovals.approvers allowlist, designed to restrict approval capabilities to authorized personnel. The vulnerability was reported on April 20, 2026. Successful exploitation grants attackers elevated privileges, potentially leading to unauthorized code execution and system compromise. This is critical for defenders to address if OpenClaw is used in their environments, as the bypass can subvert intended access controls.

Attack Chain

1. Attacker identifies a pending execution request within the OpenClaw system.
2. Attacker crafts a malicious Discord text command designed to approve the request.
3. Attacker sends the crafted command to the Discord channel monitored by OpenClaw.
4. OpenClaw processes the command without properly validating the sender's authorization.
5. The system bypasses the channels.discord.execApprovals.approvers allowlist.
6. The pending execution request is approved, despite the attacker lacking the necessary permissions.
7. The approved execution request is initiated on the host system.
8. The attacker achieves arbitrary code execution on the host system.

Impact

Successful exploitation of this vulnerability allows unauthorized users to approve and execute arbitrary commands on the target system. Given that OpenClaw manages execution requests, this could lead to significant compromise, including data breaches, system takeover, or denial of service. The vulnerability poses a significant risk to organizations relying on OpenClaw for managing execution approvals, as it undermines the intended security controls and could enable malicious actors to perform privileged actions without proper authorization.

Recommendation

• Upgrade OpenClaw to version 2026.3.28 or later to remediate the vulnerability (CVE-2026-41303).
• Monitor Discord channels used by OpenClaw for suspicious commands that attempt to approve execution requests, and create rules to detect anomalies related to command usage and origins.
• Implement stricter input validation and authorization checks within OpenClaw to prevent command spoofing and unauthorized access.