OpenClaw versions earlier than 2026.4.24 allow commands to execute with a slash token that has already been revoked. The delay between token revocation and the monitor refresh means that a token can remain accepted for a brief window after revocation. Attackers can use this window to invoke slash command behavior and potentially perform actions that the operator had removed from the token’s permissions. The flaw is a token validation issue (CWE-613) that can lead to unauthorized command execution.

The vulnerability affects the OpenClaw product from OpenClaw. All installations running any 2026.4 release before version 2026.4.24 are susceptible. No older or newer versions are impacted according to the CNA information.

The CVSS score of 6 indicates a moderate risk, and the EPSS score is not published, so the likelihood of exploitation is unclear but the flaw could be exploited by anyone who has a valid slash token that they might revoke. Because the vulnerability relies on a timing window, attackers might attempt to trigger command execution during the monitor refresh delay. The flaw is not listed in the CISA KEV catalog, but the moderate severity and potential for unauthorized command execution warrants prompt remediation. Attackers could exploit existing tokens on the network or via compromised user accounts; no network portion is required beyond having the revoked token.