OpenClaw versions before 2026.4.25 contain a control scope enforcement bypass that allows authenticated callers to execute the focus command without proper authorization checks. This flaw permits an attacker with valid credentials to change the focus state beyond the intended caller authority, potentially enabling unauthorized operations such as misconfiguring the gateway, redirecting traffic, or executing arbitrary commands if the gateway trusts the input. The vulnerability is an access control failure (CWE-862).

All OpenClaw deployments running a version earlier than 2026.4.25 are affected. The product is OpenClaw, a node.js-based client platform for network gateways. No other vendors are listed. The specific version information is limited to "before 2026.4.25", but any build preceding that release is at risk.

The CVSS base score of 6.8 indicates moderate severity. The EPSS score of less than 1% suggests a very low probability of exploitation in the wild. It is not currently listed in CISA's KEV catalog. The likely attack path requires an authenticated user to invoke the focus command; once the command is executed, the lack of proper scope enforcement enables an attacker to manipulate the system state. The vulnerability can be exploited remotely over the network if the focus command is exposed through the OpenClaw API or web interface.