Authorization Bypass in OpenClaw Affects Multiple Product Tools

CVE-2026-102807

What is CVE-2026-102807?

An incorrect authorization vulnerability in OpenClaw allows operators with read-only access to bypass necessary authorization checks when executing state-changing tools via the MCP App. Attackers with valid read tokens can exploit this flaw to obtain unauthorized access to sensitive features by generating a standalone ticket from the vulnerable mcp.app.view method. This ticket can then be used against the MCP app view endpoint, enabling the execution of operations that should be restricted to higher-scope operators. Users are urged to update to OpenClaw version 2026.9.4 or later to mitigate this security risk.

References