OpenClaw (< 2026.5.6)

A vulnerability in OpenClaw versions prior to 2026.5.5 allows an unauthorized sender to bypass configured owner-only command policies, enabling the execution of 'owner-style' native commands by senders who should not have such access, potentially leading to unauthorized command execution or privilege escalation.