PT-2026-23546 · Openclaw · Openclaw

Megamansec · Published 2026-02-17 · Updated 2026-03-07 · CVE-2026-28471

Positive Technologies (AI Summary)

CVSS v4.0

6.3

Medium

Base vector

AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions OpenClaw versions 2026.1.14-1 through 2026.2.1

Description The software contains a flaw where direct message (DM) allowlist matching can be circumvented by precisely matching sender display names and localparts without homeserver verification. This allows remote Matrix users to impersonate permitted identities by utilizing attacker-controlled display names or matching localparts from different homeservers, potentially reaching the routing and agent pipeline. The issue arises because DM allowlist decisions are made by exact-matching entries against sender-derived candidates, including the sender display name and the sender MXID localpart without the homeserver component. If an operator configures Matrix allowlists with display names or bare localparts, a remote Matrix user may be able to impersonate an allowed identity.

Recommendations Upgrade to OpenClaw version 2026.2.2 or later. Ensure Matrix allowlists contain only full Matrix user IDs (MXIDs) like @user:server. Do not use display names or bare localparts.

Fix

Authentication Bypass by Spoofing

Improper Authentication

Weakness Enumeration

CWE-290

CWE-287

Related Identifiers

CVE-2026-28471

GHSA-RMXW-JXXX-4CPC

Affected Products

Openclaw

References · 10

• https://github.com/openclaw/openclaw/security/advisories/GHSA-rmxw-jxxx-4cpc · Vendor Advisory
• https://github.com/openclaw/openclaw/commit/8f3bfbd1c4fb967a2ddb5b4b9a05784920814bcf · Patch
• https://osv.dev/vulnerability/CVE-2026-28471 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-rmxw-jxxx-4cpc · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-28471 · Security Note
• https://github.com/openclaw/openclaw · Note
• https://github.com/openclaw/openclaw/releases/tag/v2026.2.2 · Note
• https://t.me/CVEtracker/46490 · Telegram Post
• https://vulncheck.com/advisories/openclaw-allowlist-bypass-via-displayname-and-cross-homeserver-localpart-matching-in-matrix · Note
• https://twitter.com/CVEnew/status/2030385176472072194 · Twitter Post