OpenClaw versions prior to 2026.6.9 allow lower‑trust callers to gain elevated privileges through the plugin install command. The flaw results from insufficient validation of input paths and enabled features, enabling an attacker to execute or persist actions beyond their intended authorization, a weakness described by CWE-732 and CWE-862.

The affected product is OpenClaw by OpenClaw. Versions 2026.5.20 through 2026.6.8 inclusive are vulnerable. Users running these releases without upgrading to 2026.6.9 or later are at risk.

The CVSS score of 8.7 categorizes this flaw as high severity. The EPSS score is below 1 percent, indicating a low but non‑zero likelihood of exploitation, and the vulnerability is not listed in the CISA KEV catalog. It is inferred from the description that attackers exploit the flaw by invoking the plugin install functionality, which may be reachable remotely or locally depending on configuration. Exploitation can lead to unauthorized code execution with higher privileges, compromising the confidentiality, integrity, and availability of the affected system.