Authorization Bypass in OpenClaw Affects Matrix Profile Persistence

CVE-2026-42433

What is CVE-2026-42433?

OpenClaw, in versions prior to 2026.4.10, presents an authorization bypass vulnerability that enables attackers to exploit insufficient access controls. This flaw allows non-privileged users to manipulate Matrix profile persistence by executing operator.write message-tool paths. As a result, unauthorized users can alter critical settings and persist configurations that should be restricted to admin-level access, posing potential risks to system integrity and data security.

References