Is there a patch available for CVE-2026-34507?

Yes, a patch is available for CVE-2026-34507. Update the affected software to the latest version immediately.

OpenClaw CVE-2026-34507

Q: What is the CVSS score of CVE-2026-34507?

CVE-2026-34507 has a CVSS 4.0 base score of 2.3 (Low). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-33334 LOW

Incorrect Authorization (CWE-863)

2026-05-29 disclosure@vulncheck.com

GHSA-vhpw-p338-rhp9

Authentication Bypass Openclaw

2.3

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

2.3 LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Patch available

May 29, 2026 - 17:02 EUVD

Analysis Generated

May 29, 2026 - 16:52 vuln.today

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

1 npm packages depend on openclaw (1 direct, 0 indirect)

Ecosystem-wide dependent count for version 2026.4.29.

DescriptionCVE.org

OpenClaw before 2026.4.29 contains a policy bypass vulnerability in QQBot admin commands that allows authenticated senders to skip DM-only and allowFrom policy checks. Attackers can route admin commands from unauthorized senders or contexts to execute restricted behavior that policy should have blocked.

AnalysisAI

Policy bypass in OpenClaw's QQBot admin command handling allows authenticated low-privilege network users to circumvent DM-only and allowFrom authorization checks, routing restricted admin commands from unauthorized senders or contexts. Affected versions are all OpenClaw releases prior to 2026.4.29. The CVSS 4.0 score of 2.3 reflects limited confidentiality and integrity impact with no availability impact, and no public exploit has been identified at time of analysis.

Technical ContextAI

OpenClaw's QQBot integration exposes admin commands that are intended to be policy-gated through two mechanisms: a DM-only restriction (commands must originate from direct messages) and an allowFrom list (commands only accepted from specific authorized senders). The root cause is CWE-863 (Incorrect Authorization) - the enforcement logic for these two policy controls can be bypassed, allowing command routing from contexts or senders the policy explicitly prohibits. The CVSS 4.0 vector's AT:P (Attack Requirements: Present) confirms that specific preconditions must be met, consistent with the need to be an authenticated participant in the bot environment. No CPE strings were provided; affected product scope is derived solely from the vendor description.

RemediationAI

The primary fix is to upgrade OpenClaw to version 2026.4.29 or later, which resolves the policy bypass in QQBot admin command handling. Full details are available in the vendor security advisory at https://github.com/openclaw/openclaw/security/advisories/GHSA-w4v6-g3wm-w36c and the VulnCheck advisory at https://www.vulncheck.com/advisories/openclaw-policy-bypass-in-qqbot-admin-commands-via-dm-only-and-allowfrom-checks. If immediate patching is not feasible, consider disabling QQBot admin command functionality entirely until the patch can be applied - this eliminates the attack surface at the cost of losing bot admin capabilities. Alternatively, restrict which authenticated accounts have permission to issue QQBot admin commands at the application access control layer, and audit existing allowFrom configurations to minimize the pool of users who could attempt this bypass.