Which versions of OpenClaw are affected by EUVD-2026-28186?

OpenClaw Matrix bot integration contains an authorization bypass vulnerability (CVSS 7.7) that allows attackers with direct message access to execute privileged room control commands without proper…. A patch is available.

How to fix or mitigate EUVD-2026-28186?

Within 24 hours: inventory all OpenClaw Matrix bot instances and document current versions and deployment scope. Within 7 days: upgrade all affected OpenClaw instances to version 2026.4.15 or later per vendor advisory, and audit direct message pairings to identify and revoke unnecessary bot-to-user DM relationships. Within 30 days: implement enhanced logging and alerting on bot room control command execution, and conduct access reviews of bot-managed rooms to verify permission configurations.

OpenClaw EUVD-2026-28186

Q: What is the CVSS score of EUVD-2026-28186?

EUVD-2026-28186 has a CVSS 4.0 base score of 7.7 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

| CVE-2026-44110 HIGH

Incorrect Authorization (CWE-863)

2026-05-06 disclosure@vulncheck.com

GHSA-2gvc-4f3c-2855

Authentication Bypass Openclaw

7.7

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

7.7 HIGH

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Patch available

May 06, 2026 - 21:03 EUVD

Source Code Evidence Fetched

May 06, 2026 - 20:35 vuln.today

Analysis Generated

May 06, 2026 - 20:35 vuln.today

CVE Published

May 06, 2026 - 20:16 nvd

HIGH 7.7

DescriptionCVE.org

OpenClaw before 2026.4.15 contains an authorization bypass vulnerability in Matrix room control-command authorization that trusts DM pairing-store entries. Attackers with DM-paired sender IDs can execute room control commands without being in configured allowlists by posting in bot rooms, potentially enabling privileged OpenClaw behavior.

AnalysisAI

Authorization bypass in OpenClaw Matrix bot integration allows DM-paired attackers to execute privileged room control commands without configured permissions. Attackers who have previously established direct message pairing can exploit misaligned allowlist logic to run room control commands in bot rooms, bypassing room membership and allowlist requirements. Fixed in version 2026.4.15 after responsible disclosure by Keen Security Lab. No evidence of active exploitation; publicly available vendor advisory and fix commits reduce exploitation probability.

Technical ContextAI

OpenClaw is a Matrix protocol bot framework that maintains separate authorization contexts for direct messages (DMs) and room-based interactions. The vulnerability (CWE-863: Incorrect Authorization) stemmed from the room control-command authorization logic incorrectly consulting the DM pairing store when validating sender permissions for room commands. The pairing store tracks sender IDs authorized for one-on-one DM interactions, which should never grant authority over multi-user room control commands. The flawed implementation in access-state.ts merged DM pairing-store entries into the effective allowlist for room traffic, creating an authorization boundary confusion. Room control commands in Matrix bots typically drive privileged operations like configuration changes, data retrieval, or workflow triggers-making this bypass a path to unintended privilege escalation within the bot's operational scope.

RemediationAI

Upgrade to OpenClaw version 2026.4.15 or later, which contains authorization boundary fixes in commits f8705f512b09043df02b5da372c33374734bd921 (PR #67294) and 2bfd808a83116bd888e3e2633a61473fa2ed81b6 (PR #67325). The patch restructures room control-command authorization to exclude DM pairing-store entries from the room allowlist, enforcing strict separation between DM and room authorization contexts. Update instructions and release details are available at https://github.com/openclaw/openclaw/security/advisories/GHSA-2gvc-4f3c-2855. If immediate patching is not feasible, implement compensating controls: disable Matrix room control commands entirely via bot configuration, restrict bot room membership to only trusted administrator accounts, or implement out-of-band verification for room control command senders (noting this adds operational overhead and user friction). Audit existing DM pairing-store entries and remove any sender IDs that should not have room command access, though this provides only partial mitigation since the authorization logic flaw remains. Review bot command and tool policies to ensure room control commands do not expose overly privileged operations that could be abused. The side effect of disabling room control commands is loss of Matrix-based bot management functionality, requiring alternative administrative interfaces.