PT-2026-26744 · Openclaw · Openclaw

Tdjackey · Published 2026-03-12 · Updated 2026-03-25 · CVE-2026-32895

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.2.26

Description The software does not properly enforce sender authorization in member and message subtype system event handlers. This allows unauthorized events to be enqueued, potentially bypassing Slack DM allowlists and per-channel user allowlists. Attackers can achieve this by sending system events from non-allowlisted senders through message changed, message deleted, and thread broadcast events.

Recommendations Update to version 2026.2.26 or later.

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2026-32895

GHSA-V8CG-4474-49V8

GHSA-XGWG-M42C-8Q62

Affected Products

Openclaw

References · 11

• https://github.com/openclaw/openclaw/security/advisories/GHSA-v8cg-4474-49v8 · Vendor Advisory
• https://github.com/openclaw/openclaw/commit/3d30ba18a2aba1e1b302e77ff33145c3b06c01c8 · Patch
• https://osv.dev/vulnerability/GHSA-v8cg-4474-49v8 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-xgwg-m42c-8q62 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-32895 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-32895 · Security Note
• https://github.com/openclaw/openclaw · Note
• https://vulncheck.com/advisories/openclaw-sender-authorization-bypass-in-slack-system-event-handlers · Note
• https://twitter.com/subagentic/status/2036828101989269878 · Twitter Post
• https://twitter.com/CVEnew/status/2035237325975036166 · Twitter Post
• https://twitter.com/infoflowcloud/status/2035239039758995909 · Twitter Post