CVE-2026-28469

OpenClaw contains a webhook routing vulnerability in the Google Chat monitor component (extensions/googlechat/src/monitor.ts) that allows cross-account policy context misrouting when multiple webhook targets share the same HTTP path. The issue arises because the system uses first-match request ve...