GHSA-x2ff-j5c2-ggpr: OpenClaw: Slack interactive callbacks could skip configured sender checks in some shared-workspace flows

OpenClaw, a Slack integration tool, had a security flaw where some interactive callbacks (actions triggered by users in Slack, like button clicks) could skip sender authorization checks in shared workspaces. This meant an unauthorized workspace member could inject system messages into an active session, though the flaw did not allow unauthenticated access or broader system compromise.