Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
•added 2026/04/07 6:14 p.m.•17 views

OpenClaw: Zalo replay dedupe cache could suppress events across authenticated webhook targets

Summary Before OpenClaw 2026.3.31, the Zalo webhook replay-dedupe cache was shared across authenticated webhook targets and keyed too broadly. In multi-account deployments, a replay seen on one account could suppress a legitimate event on another account if eventname and messageid matched. Impact...

5.9AI score
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
•added 2026/04/07 12:00 a.m.•3 views

PT-2026-33566

Summary Before OpenClaw 2026.3.31, the Zalo webhook replay-dedupe cache was shared across authenticated webhook targets and keyed too broadly. In multi-account deployments, a replay seen on one account could suppress a legitimate event on another account if event name and message id matched. Impa...

2.3CVSS5.9AI score
SaveExploits0References5
Rows per page
Query Builder