PT-2026-25133 · Npm · Openclaw

Published 2026-03-02 · Updated 2026-03-02

OSV

CVSS v3.1

3.7

Low

Base vector

AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N

Summary

In OpenClaw 2026.2.25, Signal group authorization under groupPolicy=allowlist could accept sender identities sourced from DM pairing-store approvals. This allowed DM pairing approvals to leak into group allowlist evaluation.

Impact

This is an authorization-boundary weakness between DM pairing and group allowlist controls. A sender approved for DM pairing could pass group checks without explicit group allowlisting.

Affected Packages / Versions

• Package: openclaw (npm)
• Latest published version affected: 2026.2.25
• Vulnerable range: <= 2026.2.25
• Patched version (planned next release): >= 2026.2.26

Fix

OpenClaw now keeps DM pairing-store entries DM-only and enforces explicit group allowlist boundaries in shared DM/group policy resolution used by Signal and other channels.

Fix Commit(s)

• 8bdda7a651c21e98faccdbbd73081e79cffe8be0
• 64de4b6d6ae81e269ceb4ca16f53cda99ced967a

Release Process Note

patched versions is pre-set to the planned next release (2026.2.26). After npm publish of that version, this advisory is ready to publish without further content edits.

Thanks @tdjackey for reporting.

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

GHSA-WM8R-W8PF-2V6W

Affected Products

Openclaw

References · 7

• https://osv.dev/vulnerability/GHSA-wm8r-w8pf-2v6w · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-31991 · Security Note
• https://github.com/openclaw/openclaw · Note
• https://github.com/openclaw/openclaw/security/advisories/GHSA-wm8r-w8pf-2v6w · Note
• https://github.com/openclaw/openclaw/commit/64de4b6d6ae81e269ceb4ca16f53cda99ced967a · Note
• https://github.com/openclaw/openclaw/commit/8bdda7a651c21e98faccdbbd73081e79cffe8be0 · Note
• https://vulncheck.com/advisories/openclaw-authorization-bypass-via-dm-pairing-store-leakage-in-signal-group-allowlist · Note