OpenClaw before 2026.4.15 contains an authorization bypass vulnerability in Matrix room control-command authorization that trusts DM pairing-store entries. Atta…

OpenClaw versions before 2026.4.15 contain an authorization bypass vulnerability in Matrix room control-command authorization that trusts DM pairing-store entries. Attackers with DM-paired sender IDs can execute room control commands without being in configured allowlists by posting in bot rooms. This vulnerability potentially enables privileged OpenClaw behavior and bypasses security controls. The issue affects the Matrix messaging protocol integration in OpenClaw systems.