Illustration only Photo by Ivan N on Unsplash
Quoting OpenClaw
Why it matters — The lack of authentication means any client can manipulate other users’ bookings, exposing the service to abuse and loss of trust. Engineers building or integrating with such APIs must assume that critical actions may be unauthenticated unless explicitly protected. Fixing the issue will require adding proper permission checks, which adds development and testing overhead but restores basic security guarantees.