{"data":{"id":"c768804d-cb2b-497b-a49e-23988d99d45c","title":"GHSA-x2ff-j5c2-ggpr: OpenClaw: Slack interactive callbacks could skip configured sender checks in some shared-workspace flows","summary":"OpenClaw versions `<= 2026.2.24` accepted some Slack interactive callbacks (`block_action`, `view_submission`, `view_closed`) before full sender authorization checks in shared workspace deployments that use sender restrictions. An unauthorized workspace member could enqueue system-event text into an active session, but the issue did not by itself provide unauthenticated access, cross-gateway isolation bypass, or host-level privilege escalation.","solution":"Fixed in `2026.2.25` (planned next npm release), via commit `ce8c67c314b93f570f53c2a9abc124e1e3a54715`. The source states that OpenClaw does not support adversarial multi-user isolation on a single shared gateway instance; the supported model is one trust boundary per gateway, with separate gateways or hosts for mutually untrusted users.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-x2ff-j5c2-ggpr","publishedAt":"2026-03-04T18:55:19.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["openclaw@<= 2026.2.24 (fixed: 2026.2.25)"],"affectedPackageNames":["openclaw"],"affectedPackageRefs":["npm:openclaw"],"affectedVendors":[],"affectedVendorsRaw":["OpenClaw"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":["GHSA-x2ff-j5c2-ggpr"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":null,"fixReleasedAt":"2026-02-26T04:16:34.010Z","daysToFix":-6,"fixCheckedAt":"2026-10-29T21:40:16.763Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.8,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"npm","name":"openclaw","fixedVersion":"2026.2.25","matchedVersion":"2026.2.25","fixReleasedAt":"2026-02-26T04:16:34.010Z","daysToFix":-6,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:40:16.617Z"}]}}