OpenClaw was found to have a serious security vulnerability, allowing attackers to silently take complete administrative control. - VnExpress
According to research from AI application building company Blink, a vulnerability exists in OpenClaw that allows anyone with the lowest access rights to silently upgrade to full administrator rights if exploited. The problem occurs when the system paired with OpenClaw fails to verify whether the approver actually has the authorization authority.
"So an attacker who only needs basic pairing permissions can request administrative permissions and approve his own requests\