vulnerability · openclaw
OpenClaw: QQBot pre-dispatch slash commands could skip allowFrom checks
A vulnerability in the OpenClaw QQBot component allows slash commands to be dispatched before the configured allowFrom policy is applied, potentially bypassing access controls.
Quick answer
What defenders need to know
- What is it?
- A vulnerability in the OpenClaw QQBot component allows slash commands to be dispatched before the configured allowFrom policy is applied, potentially bypassing access controls.
- Who is affected?
- openclaw <= 2026.4.26
- What should defenders do?
- Upgrade to version 2026.4.27 or later.
- Is a fix available?
- Yes. Upgrade to 2026.4.27.
01 / Response
What to do
- Upgrade to version 2026.4.27 or later.
- Restrict QQBot slash command exposure until the patch is applied.
- Maintain narrow channel and tool allowlists.
- Avoid sharing a single Gateway between mutually untrusted users.
- Disable the QQBot slash command feature if it is not required.
02 / Technical assessment
Evidence-backed analysis
When the QQBot slash-command feature is enabled and its invocation path is reachable, pre-dispatch handling can process a slash command before applying the configured allowFrom sender policy. This is a sender-authorization bypass in command handling, not evidence of arbitrary shell execution or a system-prompt takeover. Severity High follows the GitHub Advisory Database (https://github.com/advisories/GHSA-77pv-3w4q-vrj5); the original OpenClaw repository advisory rates it Medium. The reviewed advisories do not establish observed exploitation.
- QQBot pre-dispatch slash commands could skip allowFrom checks in OpenClaw versions <= 2026.4.26.
03 / Timeline
Disclosure timeline
- Original advisory disclosure
Original repository advisory: https://github.com/openclaw/openclaw/security/advisories/GHSA-77pv-3w4q-vrj5
- Advisory database publication
OpenClaw: QQBot pre-dispatch slash commands could skip allowFrom checks
04 / Standards crosswalk
Standards crosswalk
No standards mappings are published for this record.
05 / Primary sources