CVE-2026-100575

OpenClaw Slack versions before 2026.8.1 fail to properly enforce sender allowlists in multi-person direct messages. Disallowed participants can trigger Slack agents and access tools and data granted to those agents by bypassing configured sender policies...

CVE-2026-100531

The @openclaw/slack npm package before 2026.8.1 contains an authorization flaw in its Slack download-file handler: when a file lacks the share metadata used to prove it belongs to the requested conversation, the conversation-authorization check fails open. An authenticated caller restricted to a...

EUVD-2026-87476

OpenClaw Slack versions before 2026.8.1 fail to properly enforce sender allowlists in multi-person direct messages. Disallowed participants can trigger Slack agents and access tools and data granted to those agents by bypassing configured sender policies...

CVE-2026-100575

OpenClaw Slack versions before 2026.8.1 contain a vulnerability where multi-person direct messages fail to properly enforce sender allowlists . This flaw allows disallowed participants to bypass configured sender policies, enabling them to trigger Slack agents and gain unauthorized access to the ...

CVE-2026-100575 OpenClaw Slack before 2026.8.1 Authentication Bypass via Group DM

OpenClaw Slack versions before 2026.8.1 fail to properly enforce sender allowlists in multi-person direct messages. Disallowed participants can trigger Slack agents and access tools and data granted to those agents by bypassing configured sender policies...

CVE-2026-100575 OpenClaw Slack before 2026.8.1 Authentication Bypass via Group DM

OpenClaw Slack versions before 2026.8.1 fail to properly enforce sender allowlists in multi-person direct messages. Disallowed participants can trigger Slack agents and access tools and data granted to those agents by bypassing configured sender policies...

CVE-2026-100575 OpenClaw Slack before 2026.8.1 Authentication Bypass via Group DM

OpenClaw Slack versions before 2026.8.1 fail to properly enforce sender allowlists in multi-person direct messages. Disallowed participants can trigger Slack agents and access tools and data granted to those agents by bypassing configured sender policies...

CVE-2026-100575

OpenClaw Slack versions before 2026.8.1 fail to properly enforce sender allowlists in multi-person direct messages. Disallowed participants can trigger Slack agents and access tools and data granted to those agents by bypassing configured sender policies...

CVE-2026-100531

The @openclaw/slack npm package (versions before 2026.8.1 ) contains an authorization flaw in the Slack download-file handler . The vulnerability occurs because the conversation-authorization check fails open when a file lacks the share metadata required to prove it belongs to a specific conversa...

CVE-2026-100531 openclaw Slack before 2026.8.1 Authorization Bypass

The @openclaw/slack npm package before 2026.8.1 contains an authorization flaw in its Slack download-file handler: when a file lacks the share metadata used to prove it belongs to the requested conversation, the conversation-authorization check fails open. An authenticated caller restricted to a...

EUVD-2026-87519

The @openclaw/slack npm package before 2026.8.1 contains an authorization flaw in its Slack download-file handler: when a file lacks the share metadata used to prove it belongs to the requested conversation, the conversation-authorization check fails open. An authenticated caller restricted to a...

CVE-2026-100531

The @openclaw/slack npm package before 2026.8.1 contains an authorization flaw in its Slack download-file handler: when a file lacks the share metadata used to prove it belongs to the requested conversation, the conversation-authorization check fails open. An authenticated caller restricted to a...

CVE-2026-100531 openclaw Slack before 2026.8.1 Authorization Bypass

The @openclaw/slack npm package before 2026.8.1 contains an authorization flaw in its Slack download-file handler: when a file lacks the share metadata used to prove it belongs to the requested conversation, the conversation-authorization check fails open. An authenticated caller restricted to a...

CVE-2026-100531 openclaw Slack before 2026.8.1 Authorization Bypass

The @openclaw/slack npm package before 2026.8.1 contains an authorization flaw in its Slack download-file handler: when a file lacks the share metadata used to prove it belongs to the requested conversation, the conversation-authorization check fails open. An authenticated caller restricted to a...

PT-2026-99211

Name of the Vulnerable Software and Affected Versions OpenClaw Slack versions prior to 2026.8.1 Description Multi-person direct messages fail to properly enforce sender allowlists. This allows unauthorized participants to bypass configured sender policies, enabling them to trigger Slack agents an...

PT-2026-99168

Name of the Vulnerable Software and Affected Versions @openclaw/slack versions prior to 2026.8.1 Description An authorization flaw exists in the Slack download-file handler. When a file lacks the share metadata required to verify its association with a requested conversation, the...

CVE-2026-100531: Authorization Bypass Through User-Controlled Key

The @openclaw/slack npm package before 2026.8.1 contains an authorization flaw in its Slack download-file handler: when a file lacks the share metadata used to prove it belongs to the requested conversation, the conversation-authorization check fails open. An authenticated caller restricted to a...

CVE-2026-100575: Missing Authorization

OpenClaw Slack versions before 2026.8.1 fail to properly enforce sender allowlists in multi-person direct messages. Disallowed participants can trigger Slack agents and access tools and data granted to those agents by bypassing configured sender policies...

NPM: OpenClaw's Slack plugin approvals used the exec approver gate for plugin actions

NPM: OpenClaw's Slack plugin approvals used the exec approver gate for plugin actions vulnerability discovered by ? in WordPress Npm openclaw versions 2026.5.12...

GHSA-WV26-J37Q-2G7P OpenClaw's Slack plugin approvals used the exec approver gate for plugin actions

Summary Slack plugin approvals used the exec approver gate for plugin actions. In affected versions, a Slack user authorized only for exec approvals could resolve a plugin approval through the exec approver gate. This advisory is scoped to the named feature and configuration. It does not change...