Lucene search
+L

5 matches found

Github Security Blog
Github Security Blog
added 2026/05/04 4:52 p.m.7 views

OpenClaw: Slack thread context could include messages from non-allowlisted senders

Summary Before OpenClaw 2026.4.2, Slack thread starter and thread-history context fetched through the API was not filtered by the effective sender allowlist. Messages from non-allowlisted senders could still enter the agent context when an allowlisted user replied in the same thread. Impact A Sla...

5.4CVSS5.8AI score0.0014EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder