PT-2026-37027

Name of the Vulnerable Software and Affected Versions OpenClaw versions 2026.4.10 through 2026.4.13 Description The Microsoft Teams SSO invoke handler fails to apply sender allowlist checks. This allows attackers to bypass sender authorization by sending SSO invoke requests that are processed...