PT-2026-23521 · Slack+1 · Slack+1

Christos · Published 2026-02-18 · Updated 2026-03-10 · CVE-2026-28392

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.2.14

Description The Slack slash-command handler incorrectly authorizes any direct message sender when the dmPolicy is set to open. This allows attackers to execute privileged slash commands via direct message, bypassing allowlist and access-group restrictions. The issue occurs when Slack DMs are enabled with channels.slack.dm.policy: open (also known as dmPolicy=open). Any Slack user who can send a direct message to the bot could invoke privileged slash commands.

Recommendations Update to version 2026.2.14 or later.

Fix

LPE

Improper Authorization

Incorrect Authorization

Weakness Enumeration

CWE-285

CWE-863

Related Identifiers

CVE-2026-28392

GHSA-V773-R54F-Q32W

Affected Products

Openclaw

Slack

References · 12

• https://github.com/openclaw/openclaw/security/advisories/GHSA-v773-r54f-q32w · Vendor Advisory
• https://github.com/openclaw/openclaw/commit/f19eabee54c49e9a2e264b4965edf28a2f92e657 · Patch
• https://osv.dev/vulnerability/GHSA-v773-r54f-q32w · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-28392 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-28392 · Security Note
• https://github.com/openclaw/openclaw · Note
• https://github.com/openclaw/openclaw/releases/tag/v2026.2.14 · Note
• https://twitter.com/CVEnew/status/2030385200224485640 · Twitter Post
• https://t.me/cveNotify/154976 · Telegram Post
• https://twitter.com/CveFindCom/status/2029688801006629138 · Twitter Post
• https://twitter.com/renandnzsantos/status/2030385569650380904 · Twitter Post
• https://vulncheck.com/advisories/openclaw-privilege-escalation-in-slack-slash-command-handler-via-direct-messages · Note