Vulnerability · Published Sep 29, 2026 · Assigned by VulnCheck

CVE-2026-102807OpenClaw before 2026.9.4 Authorization Bypass via MCP App Standalone Ticket

Medium 5.3

In plain English

A medium-severity incorrect authorization in OpenClaw from OpenClaw. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 14% of all known vulnerabilities).

Severity (CVSS 3.1)5.3Medium

Exploit odds (30 days)0.2%top 86.2% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

OpenClaw before 2026.9.4 contains an incorrect authorization vulnerability in the mcp.app.view method that allows read-scoped operators to execute MCP App tools requiring operator.write scope. Attackers with operator.read tokens can obtain a standalone ticket from mcp.app.view and redeem it at the MCP app view endpoint to invoke state-changing tools without proper authorization checks.

Affected products (as reported)

Vendor	Product	Versions
OpenClaw	OpenClaw	0 – before 2026.9.4

Weakness: CWE-863 · Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N

References

Pull Request #142661 issue-tracking, patch
Patch Commit patch
https://github.com/openclaw/openclaw/blob/1391f7cd2d40ab5bbcf2f5f831d3a64f520e72d7/src/gateway/mcp-app-standalone.ts#L209-L215 technical-description
https://docs.openclaw.ai/releases/2026.9.4 release-notes
https://github.com/openclaw/openclaw product
VulnCheck Advisory: OpenClaw before 2026.9.4 Authorization Bypass via MCP App Standalone Ticket third-party-advisory