| Package | Affected versions | Patched versions |
|---|---|---|
| openclaw | ≥ 2026.5.12, < 2026.5.26 | 2026.5.26 |
OpenClaw 2026.5.12 before 2026.5.26 contain an incorrect authorization vulnerability in the ClickClack allowFrom feature. When the affected feature is enabled and reachable, a lower-trust caller or configured input path could execute or persist actions beyond the caller's intended authorization, including running non-allowlisted commands.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free