OpenClaw before 2026.4.15 contains an authorization bypass vulnerability in Matrix room control-command authorization that trusts DM pairing-store entries. Atta…

OpenClaw before version 2026.4.15 contains an authorization bypass vulnerability in Matrix room control-command authorization. The vulnerability stems from the system trusting DM pairing-store entries without proper validation. Attackers who have DM-paired sender IDs can exploit this flaw to execute room control commands without being included in configured allowlists. The attack is carried out by posting malicious commands in bot rooms, which can lead to privileged OpenClaw behavior being enabled without authorization. This represents a significant security flaw that allows unauthorized access to administrative functions.