CVE-2026-28473: OpenClaw < 2026.2.2 - Authorization Bypass via /approve Chat Command
OpenClaw versions prior to 2026.2.2 contain an authorization bypass vulnerability where clients with operator.write scope can approve or deny exec approval requests by sending the /approve chat command. The /approve command path invokes exec.approval.resolve through an internal privileged gateway client, bypassing the operator.approvals permission check that protects direct RPC calls.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-28473?
CVE-2026-28473 has a high severity level due to its potential for unauthorized approval or denial of exec requests.
How do I fix CVE-2026-28473?
To fix CVE-2026-28473, upgrade OpenClaw to version 2026.2.2 or later.
What types of systems are affected by CVE-2026-28473?
CVE-2026-28473 affects OpenClaw versions prior to 2026.2.2.
What exploitation impact does CVE-2026-28473 have?
Exploitation of CVE-2026-28473 allows users with operator.write scope to bypass authorization and control exec approval.
Is CVE-2026-28473 being actively exploited in the wild?
As of now, there are no confirmed reports of CVE-2026-28473 being actively exploited.