privilege-escalation-methodwidely-deployed-product-advisoryinternet-facing-service-vulnerability
Multiple OpenClaw flaws enable authorization bypass and privilege escalation
Attack Tradecraft · 13 sources · Updated 4mo ago · First seen Jun 12, 2026
OpenClaw disclosed several high-severity vulnerabilities affecting multiple releases, including authorization bypass in QQBot pre-dispatch slash commands, privilege escalation in the trusted-proxy Control UI WebSocket, and node authority expansion through pairing reconnection logic. The QQBot issue, tracked as CVE-2026-53834 and mirrored in GitHub advisory GHSA-77pv-3w4q-vrj5, affects versions up to 2026.4.26 and allows senders to trigger slash-command handling before allowFrom policy checks are enforced. The vendor said the flaw is limited to the QQBot feature and its configuration, with the first stable fix released in 2026.4.27.
Who uses this technique?Get the actors, campaigns, and ATT&CK mapping behind it.
Get the tradecraft
