CVE-2026-53833: QQBot for OpenClaw < 2026.4.29 - Authorization Bypass via QQBot Streaming Command

Synopsis

This is an authorization bypass vulnerability in the QQBot streaming command handler of OpenClaw, a self-hosted bot framework. An attacker with an existing local presence on the host (no network access required) and no special privileges can invoke the affected streaming command and mutate QQBot configuration without passing through the intended admin allowlist restrictions. Successful exploitation lets the attacker overwrite streaming configuration settings outside of authorized admin policy, potentially redirecting or corrupting bot behavior. A patched-image rebuild at version 2026.4.29 is available on HarborGuard for environments running an affected version.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityNot required

  The CVSS vector specifies AV:L, meaning the attacker needs an existing shell or process on the host rather than any network path to the service.

• AuthenticationNot required

  PR:N indicates no account or credential is required to invoke the vulnerable streaming command, though the description notes the attacker is an authenticated sender in the bot context.

• Victim interactionNot required

  UI:N confirms that no user action, click, or social-engineering step is needed to trigger the authorization bypass.

• Attack complexityDetail

  AC:L means the exploit is straightforward and repeatable, but AT:P indicates a specific target condition or configuration state must be present for the attack to succeed.

Blast Radius

• The attacker overwrites QQBot streaming configuration settings, bypassing the intended allowFrom admin allowlist entirely.
• Modified configuration can redirect or alter streaming behavior outside of administrator-defined policy, affecting how the bot processes or forwards data.
• Confidential values stored in streaming configuration (such as endpoint URLs or access tokens) may be replaced with attacker-controlled values.