Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/03/26 9:45 p.m.9 views

OpenClaw Bypasses DM Policy Separation via Synology Chat Webhook Path Collision

Summary Synology Chat multi-account configuration could collapse onto a shared webhook path, replacing route ownership and bypassing per-account DM policy separation. Affected Packages / Versions - Package: openclaw npm - Affected: = 2026.3.22 - Latest released tag checked: v2026.3.23-2...

6.5CVSS5.8AI score0.00245EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder