OpenClaw before version 2026.5.18 contains a critical scope bypass vulnerability in the Gateway chat.send route. The vulnerability allows attackers with operator.write scope to execute privileged commands through inherited external routes. This enables bypassing operator.approvals and operator.admin scope requirements. Successful exploitation allows unauthorized modifications to plugins, configuration, MCP, allowlist, and ACP settings. The vulnerability represents a significant privilege escalation risk in OpenClaw deployments.