This logic flaw allows distinct, protocol-valid Matrix user accounts to map to the same internal authorization identity within OpenClaw. A malicious actor who can register or control a user ID that collides with an existing, privileged account via case or Unicode folding can effectively inherit the target's permissions. This grants the attacker unauthorized access to functions such as owner-level commands, plugin approvals, and execution privileges previously assigned to the legitimate user. The issue was addressed in version 2026.8.1.

Impact

Successful exploitation allows a low-privilege or external user to escalate their permissions to match those of an administrative account defined in the OpenClaw system. This can lead to unauthorized system command execution, unauthorized installation of malicious plugins, and full compromise of the OpenClaw environment.

Recommendation

Prioritized, concrete actions for infrastructure and security teams:

• Upgrade the @openclaw/matrix package to version 2026.8.1 or later immediately across all affected deployments.
• Review OpenClaw authorization configurations to ensure that account allowlists and command-approval lists do not contain ambiguous or fold-colliding identifiers.
• Audit existing logs for unauthorized command execution or plugin approval requests originating from Matrix identifiers that deviate in casing from the intended administrative accounts.