| Package | Affected versions | Patched versions |
|---|---|---|
| openclaw | ≥ 2026.3.22, < 2026.6.6 | 2026.6.6 |
OpenClaw versions 2026.3.22 before 2026.6.6 contain an authorization bypass vulnerability where WhatsApp group IDs can satisfy elevated sender allowlists. Attackers with lower-trust access can perform actions requiring stronger authorization by leveraging group ID validation in the affected feature.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free