OpenClaw prior to 2026.5.18 contains an authorization bypass flaw in the QQBot native approval buttons. The software fails to check that the user clicking the button is an authorized approver, allowing any authenticated user to resolve pending execution or plugin approval requests. This weakness can lead to unauthorized changes being made to system processes or plugins, compromising integrity and potentially enabling further exploitation of the administrative interface.

The affected product is OpenClaw, specifically the OpenClaw application that hosts the QQBot module. No explicit affected version range is provided beyond the knowledge that versions before 2026.5.18 are vulnerable; therefore users should verify that they are running 2026.5.18 or later.

The CVSS score of 7.5 indicates a high severity vulnerability. Because EPSS is not available and the issue is not listed in the CISA KEV catalog, the current probability of exploitation is uncertain, but the flaw is theoretically exploitable by any authenticated user who can access the QQBot interface. The attack surface is likely web based, requiring the attacker to log into the interface and click the approval button.