OpenClaw let other chat members approve Claude Code actions meant for its owner

What happened

OpenClaw relays Claude Code's permission prompts into chat channels through its MCP channel bridge, and before 2026.7.1 it let any authorised sender with channel command access answer a prompt meant for the channel owner. A non-owner could approve or deny the pending request, so a Claude Code action could proceed without the owner's consent. Scored CVSS 3.1 8.0; the impact depends on the pending action and the host capabilities the Claude Code run requested.

The fix, OpenClaw 2026.7.1, shipped on npm on 13 July 2026; the CVE record reached NVD on 26 September. The flaw sits in OpenClaw's bridge, the third-party layer between the chat channel and Claude Code's own permission prompt.