User Impersonation

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to User Impersonation via the allowFrom feature binding to mutable display names. An attacker can gain unauthorized access to actions requiring higher privileges by manipulating the display...