CVE-2026-32898

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.2.23

Description The software contains an authorization bypass issue in the ACP client. The client auto-approves tool calls based on untrusted toolCall.kind metadata and permissive name heuristics. Attackers can bypass interactive approval prompts for read-class operations by spoofing tool metadata or using non-core read-like names to reach auto-approve paths.

Recommendations Update OpenClaw to version 2026.2.23 or later.