Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/03/04 6:55 p.m.11 views

OpenClaw: Slack interactive callbacks could skip configured sender checks in some shared-workspace flows

Impact In shared Slack workspace deployments that rely on sender restrictions allowFrom, DM policy, or channel user allowlists, some interactive callbacks blockaction, viewsubmission, viewclosed could be accepted before full sender authorization checks. In that scenario, an unauthorized workspace...

8.1CVSS6AI score0.00283EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder