Incorrect authorization in OpenClaw - CVE-2026-100556
Published: November 3, 2026
Vulnerability details
The vulnerability allows a remote user to bypass command authorization and change provider routing, cost, data flow, or availability for a shared WhatsApp group session.
The vulnerability exists due to incorrect authorization in OpenClaw's WhatsApp group session reset handling when processing /new <model> commands. A remote user can send this command as a group member admitted for ordinary messages but denied by commands.allowFrom or owner command authorization to reset the shared session and persist an unauthorized provider and model override for later turns.
Provider and model selection is restricted to those already allowed by the operator; exploitation does not add a provider or grant host execution.