PT-2026-34789 · Openclaw · Openclaw

Antaisecuritylab · Published 2026-04-23 · Updated 2026-05-07 · CVE-2026-41358

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.4.2

Description OpenClaw fails to filter Slack thread context by sender allowlist, which allows messages from non-allowlisted senders to enter the agent context. This enables attackers to inject unauthorized thread messages via replies from allowlisted users, bypassing sender access controls to manipulate the model context.

Recommendations Update to version 2026.4.2.

Fix

Origin Validation Error

Weakness Enumeration

CWE-346

Related Identifiers

CVE-2026-41358

GHSA-7HRG-5W46-5R2X

GHSA-QM77-8QJP-4VCM

Affected Products

Openclaw

References · 9

• https://github.com/openclaw/openclaw/security/advisories/GHSA-qm77-8qjp-4vcm · Vendor Advisory
• https://github.com/openclaw/openclaw/commit/ac5bc4fb37becc64a2ec314864cca1565e921f2d · Patch
• https://osv.dev/vulnerability/GHSA-7hrg-5w46-5r2x · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-41358 · Security Note
• https://osv.dev/vulnerability/GHSA-qm77-8qjp-4vcm · Vendor Advisory
• https://github.com/openclaw/openclaw · Note
• https://twitter.com/CVEnew/status/2048168350921179465 · Twitter Post
• https://vulncheck.com/advisories/openclaw-sender-allowlist-bypass-via-slack-thread-context · Note
• https://twitter.com/integ_sec/status/2052393340675510581 · Twitter Post