PT-2026-26231 · Openclaw · Openclaw

Tdjackey · Published 2026-02-26 · Updated 2026-03-20 · CVE-2026-31991

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.2.26

Description OpenClaw contains an authorization bypass issue where the Signal group allowlist policy incorrectly accepts sender identities from direct message (DM) pairing-store approvals. This allows attackers to bypass group allowlist checks and gain unauthorized group access by obtaining DM pairing approval. The issue is an authorization-boundary weakness between DM pairing and group allowlist controls. A sender approved for DM pairing could pass group checks without explicit group allowlisting.

Recommendations OpenClaw versions prior to 2026.2.26 should be updated to version 2026.2.26 or later.

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

BDU:2026-05012

CVE-2026-31991

GHSA-R849-826X-WGQM

GHSA-WM8R-W8PF-2V6W

Affected Products

Openclaw

References · 13

• https://github.com/openclaw/openclaw/security/advisories/GHSA-wm8r-w8pf-2v6w · Vendor Advisory
• https://github.com/openclaw/openclaw/commit/64de4b6d6ae81e269ceb4ca16f53cda99ced967a · Patch
• https://github.com/openclaw/openclaw/commit/8bdda7a651c21e98faccdbbd73081e79cffe8be0 · Patch
• https://osv.dev/vulnerability/GHSA-r849-826x-wgqm · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-31991 · Security Note
• https://osv.dev/vulnerability/GHSA-wm8r-w8pf-2v6w · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-05012 · Security Note
• https://osv.dev/vulnerability/CVE-2026-31991 · Vendor Advisory
• https://github.com/openclaw/openclaw · Note
• https://twitter.com/CVEnew/status/2034520393340313913 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2034508796072980576 · Twitter Post
• https://twitter.com/CVEarity/status/2034879760581722581 · Twitter Post
• https://vulncheck.com/advisories/openclaw-authorization-bypass-via-dm-pairing-store-leakage-in-signal-group-allowlist · Note