Privilege Escalation via Mutable Display Name in OpenClaw

Executive Summary

This vulnerability exists in OpenClaw versions before 2026.5.7 and involves a privilege escalation issue in the Matrix allowFrom feature. Authenticated users can exploit mutable display name metadata to match policy entries that are not intended for them. By changing display names, attackers can gain agent access meant for another Matrix identity, potentially obtaining unauthorized permissions depending on how the operator has configured the system.

Useful 0 Not Useful 0

Impact Analysis

The impact of this vulnerability is that an attacker with authenticated access can escalate their privileges by impersonating another Matrix identity through display name manipulation. This can lead to unauthorized access to agent-level permissions, which may allow the attacker to perform actions or access data they should not be able to, depending on the operator's configuration.

Useful 0 Not Useful 0

Compliance Impact

The provided information does not specify how this vulnerability affects compliance with common standards and regulations such as GDPR or HIPAA.

Useful 0 Not Useful 0

Detection Guidance

Detection of this vulnerability involves identifying whether the Matrix allowFrom feature is configured to use mutable display names in allowlists, which can be manipulated by authenticated users.

Since the vulnerability arises from the ability of users to change their display names to match policy entries, monitoring changes to display names and comparing them against allowlist entries can help detect exploitation attempts.

There are no specific commands provided in the available resources to detect this vulnerability directly on your network or system.

Useful 0 Not Useful 0

Mitigation Strategies

Immediate mitigation steps include upgrading OpenClaw to version 2026.5.7 or later, where the vulnerability is patched.

• Use stable Matrix user IDs in allowlists instead of mutable display names.
• Keep channel and tool allowlists as narrow as possible to limit exposure.
• Avoid sharing Gateways between untrusted users to reduce risk.
• Disable the Matrix allowFrom feature if it is not necessary for your environment.

Useful 0 Not Useful 0