OpenClaw before 2026.4.22 derives loopback MCP owner context from spoofable server-issued bearer tokens in request headers. Non-owner loopback clients can prese…

OpenClaw versions before 2026.4.22 contain a critical authentication bypass vulnerability where loopback MCP owner context is derived from spoofable server-issued bearer tokens in request headers. Non-owner loopback clients can manipulate the sender-owner header metadata to present themselves as owners and bypass owner-gated operations. This represents a significant privilege escalation vulnerability that allows unauthorized access to restricted functionality. The vulnerability has been addressed in version 2026.4.22 with proper token validation mechanisms.