PT-2026-22453 · Npm · Openclaw

Published 2026-02-18 · Updated 2026-02-18

OSV

CVSS v4.0

8.2

High

Base vector

AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

Summary

When Slack DMs are configured with dmPolicy=open, the Slack slash-command handler incorrectly treated any DM sender as command-authorized. This allowed any Slack user who could DM the bot to execute privileged slash commands via DM, bypassing intended allowlist/access-group restrictions.

Affected Packages / Versions

• Package: openclaw (npm)
• Affected versions: <= 2026.2.13
• Affected configuration: Slack DMs enabled with channels.slack.dm.policy: open (aka dmPolicy=open)

Impact

Any Slack user in the workspace who can DM the bot could invoke privileged slash commands via DM.

Fix

The slash-command path now computes CommandAuthorized for DMs using the same allowlist/access-group gating logic as other inbound paths.

Fix commit(s):

• f19eabee54c49e9a2e264b4965edf28a2f92e657

Release Process Note

patched versions is set to the planned next release (2026.2.14). Once that npm release is published, this advisory should be published.

Thanks @christos-eth for reporting.

Fix

Improper Authorization

Incorrect Authorization

Weakness Enumeration

CWE-285

CWE-863

Related Identifiers

GHSA-V773-R54F-Q32W

Affected Products

Openclaw

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2026-28392 · Security Note
• https://osv.dev/vulnerability/GHSA-v773-r54f-q32w · Vendor Advisory
• https://github.com/openclaw/openclaw · Note
• https://github.com/openclaw/openclaw/commit/f19eabee54c49e9a2e264b4965edf28a2f92e657 · Note
• https://github.com/openclaw/openclaw/security/advisories/GHSA-v773-r54f-q32w · Note
• https://github.com/openclaw/openclaw/releases/tag/v2026.2.14 · Note
• https://vulncheck.com/advisories/openclaw-privilege-escalation-in-slack-slash-command-handler-via-direct-messages · Note