PT-2026-26748 · Openclaw · Openclaw

Tdjackey · Published 2026-03-03 · Updated 2026-03-21 · CVE-2026-32899

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.2.25

Description The software does not consistently enforce sender-policy checks on reaction * and pin * non-message events before incorporating them into the system-event context. This allows attackers to circumvent established Direct Message policies and user allowlists, enabling the injection of unauthorized reaction and pin events originating from restricted senders.

Recommendations Update OpenClaw to version 2026.2.25 or later.

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2026-32899

GHSA-G839-VP47-WGH8

GHSA-RM2P-J3R7-4X4J

Affected Products

Openclaw

References · 11

• https://github.com/openclaw/openclaw/commit/aedf62ac7e669a89c7b299201bf6537dc6b12e0e · Patch
• https://github.com/openclaw/openclaw/commit/75dfb71e4e8b7c2feba5a8ca662f92ea840e0147 · Patch
• https://github.com/openclaw/openclaw/security/advisories/GHSA-rm2p-j3r7-4x4j · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-g839-vp47-wgh8 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-32899 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-32899 · Security Note
• https://osv.dev/vulnerability/GHSA-rm2p-j3r7-4x4j · Vendor Advisory
• https://github.com/openclaw/openclaw · Note
• https://vulncheck.com/advisories/openclaw-sender-policy-bypass-in-slack-reaction-and-pin-event-handlers · Note
• https://twitter.com/infoflowcloud/status/2035238991184728406 · Twitter Post
• https://twitter.com/CVEnew/status/2035237321877201045 · Twitter Post