PT-2026-25527 · Npm · Openclaw
Publicado
2026-03-04
·
Atualizado
2026-03-04
CVSS v4.0
7.6
Alta
| Vetor | AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N |
Impact
In shared Slack workspace deployments that rely on sender restrictions (
allowFrom, DM policy, or channel user allowlists), some interactive callbacks (block action, view submission, view closed) could be accepted before full sender authorization checks.In that scenario, an unauthorized workspace member could enqueue system-event text into an active session. This issue did not provide unauthenticated access, cross-gateway isolation bypass, or host-level privilege escalation by itself.
Affected Packages / Versions
- Package:
openclaw(npm) - Vulnerable versions:
<= 2026.2.24 - Patched version:
2026.2.25(planned next npm release)
Fix Commit(s)
ce8c67c314b93f570f53c2a9abc124e1e3a54715
Release Process Note
patched versions is pre-set to the release (2026.2.25). Advisory published with npm release 2026.2.25.Trust Model Scope Note
OpenClaw does not support adversarial multi-user isolation on a single shared gateway instance. The supported model is one trust boundary per gateway (separate gateways/hosts for mutually untrusted users). See: https://docs.openclaw.ai/gateway/security
OpenClaw thanks @tdjackey for reporting.
Correção
Incorrect Authorization
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Openclaw